Branch: refs/heads/stable/1.4.x
  Home:   https://github.com/django/django
  Commit: 065caafa70b6c422f73e364a4c241b6538969d7b
      
https://github.com/django/django/commit/065caafa70b6c422f73e364a4c241b6538969d7b
  Author: Simon Charette <[email protected]>
  Date:   2014-09-08 (Mon, 08 Sep 2014)

  Changed paths:
    M django/contrib/admin/options.py
    A docs/releases/1.4.16.txt
    M docs/releases/index.txt
    M tests/regressiontests/admin_views/admin.py
    M tests/regressiontests/admin_views/models.py
    M tests/regressiontests/admin_views/tests.py

  Log Message:
  -----------
  [1.4.x] Fixed #23431 -- Allowed inline and hidden references to admin fields.

This fixes a regression introduced by the 53ff096982 security fix.

Thanks to @a1tus for the report and Tim for the review.

refs #23329.

Backport of 342ccbd from master


-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/540df412b7a46_31b33fb67e8552b8138d3%40hookshot-fe3-cp1-prd.iad.github.net.mail.
For more options, visit https://groups.google.com/d/optout.

Reply via email to