Mezzanine

Latest version: v6.0.0

Safety actively analyzes 628499 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 23

1.4.11

Not secure
-----------------------------

* Added mezzatheme themes marketplace to features list - Stephen McDonald
* Method to load all symbols of all files in a submodule - Thomas Rega
* Use new decorator ``"richhtext_filters"``. The decorator ``"richtext_filter"`` is marked as deprecated - Thomas Rega
* Move gallery related tests into the app directory. If the app is not installed, the tests are not executed - Thomas Rega
* Move blog related tests into the app directory. If the app is not installed, the tests are not executed - Thomas Rega
* Move page related tests into the app directory. If the app is not installed, the tests are not executed - Thomas Rega
* Move account related tests into the app directory. If the app is not installed, the tests are not executed - Thomas Rega
* Move form related tests into the app directory. If the app is not installed, the tests are not executed - Thomas Rega
* Move core related tests into the app tests directory. These tests do not belong direct to an specific app, so they stay. in the core app directory for now - Thomas Rega
* Simplify new test module structure - Stephen McDonald
* Provide a common TestCase class for all app specific tests, for features such as admin user plus debug cursor for query tracking. Also consistent naming for tests - Stephen McDonald
* Move tons of tests into their correct apps - Stephen McDonald
* Patch ``jquery.overlay`` with ``jquery.browser`` support to work with new jQuery versions. Closes 701 - Stephen McDonald
* Force tinyMCE save in ``dynamic_inline.js`` to avoid issues with richtext fields in dynamic inlines and ordering values not correctly handled. Closes 731 - Stephen McDonald
* Update dev status classifier in ``setup.py`` - Stephen McDonald
* Remove inclusion of ``mezzanine.accounts`` when testing - Zach Gohr
* Inject all Mezzanine apps into the temp settings module when Mezzanine itself is being tested - Stephen McDonald
* Use setuptools to test on travis - Stephen McDonald
* Apply skipTests throughout different tests where apps are coupled - Stephen McDonald
* ``setup.py`` specifies the test deps so we don't need to grab them for travis now - Stephen McDonald
* Update ``send_mail_template`` to pass optional email headers to the EmailMultiAlternatives constructor. Rather than having the form ``page_processor`` send mail from user submitted email addresses (if present) have it specify the Reply-To header - Josh Cartmell
* Get rid of ``FORMS_DISABLE_SEND_FROM_EMAIL_FIELD``, always add the Reply-To header if there is an ``email_to`` - Josh Cartmell
* Adding template accessible settings into context for rendering templates for emails - Danny Sag
* Handling case when diff between min and max count is smaller than size. Weights were not calculated correctly when difference between `max_count` and `min_count` was smaller than `settings.TAG_CLOUD_SIZES`. Changed calculation of weights to use floating point arithmetic. The results of weight calculations using old and new code are shown below: ``http://ideone.com/fXs5aG`` - Ahmet Bakan
* Adding ``.control-label`` to ``form_fields.html`` - Troy Harvey
* Be a bit more explicit with request arg in settings context processor - Stephen McDonald
* Added mezzanine-meze to third-party apps list - Stephen McDonald
* Added support for Django 1.6. - The situations in which ``contribute_to_class`` is called have changed. - Fixed DeprecationWarning about simplejson. - Explicitly set the ``TEST_RUNNER`` to the pre 1.6 one. - Set default=False on BooleanField - Rocky Meza
* Keep django version pinned - Stephen McDonald
* Ensure correct arguments are used when returning a Page in place of a 404 from a non-page urlpattern - Ben Ledbury
* Better error propagation when querying for tweets - Stephen McDonald
* Added --force option to ``poll_twitter`` command which will query for tweets on all queries - Stephen McDonald
* Catch and show twitter query errors in management command, and allow continuing - Stephen McDonald
* Allow twitter queries to gracefully fail in templates - Stephen McDonald
* Bump requeusts-oauthlib version. Closes 764 - Stephen McDonald
* Exempt Link pages from 404 Page replacement - Ben Ledbury
* Changed 'form' to ``'editable_form'`` to fix naming conflict. Editable JS no longer being pulled in - Nicole Harris
* Don't quote bullets,. The indentation causes the bullets to be treated as blockquotes - David Winterbottom
* ,but do quote quotes :grinning: - David Winterbottom
* Use correct comment field name in akismet API. Closes 768 - Stephen McDonald
* Added TimeStamped model mixin to Displayable, for created/updated timestamps on all models. Closes 661 - Stephen McDonald
* Allow account signups with profiles containing non-nullable fields. Closes 749 - Stephen McDonald

1.4.10

Not secure
-----------------------------

* Added ``window.__language_code`` variable to admin and inline loader - Artem Gluvchynsky
* Better error message for page models that get removed from ``INSTALLED_APPS``. Closes 722 - Stephen McDonald
* Allow initial user creation in syncdb when a profile model is managed by migrations and doesn't yet exist - Stephen McDonald
* Looser AJAX response check for page reordering. Closes 727 - Stephen McDonald
* Allow key settings to be defined in fab conf and injected into live ``local_settings`` module - Stephen McDonald
* Added valid Polish messages for mezzanine/core. Closes 729 - Marek Wywiał
* add a ``tox.ini`` config file - jferry
* Use protocol-relative URL to avoid SSL warnings - Vinod Kurup
* Make running fabfile outside project root optional, since it conflicts with importing the fabfile into other fabfiles - Stephen McDonald
* Specify minimum version of pytz requirement - Vinod Kurup
* Fixed view and JS to be compatible with jQuery 1.8 - Ethan Goldstine
* Fix ``gravatar_url`` tag for non-ascii email addresses. Closses 721 - Stephen McDonald

1.4.9

Not secure
----------------------------

* Allow deployments to be run from project subdirectories - Stephen McDonald
* Add support for ``settings.RICHTEXT_FILTERS``. ``RICHTEXT_FILTERS`` is a list of items that are valid for the. ``RICHTEXT_FILTER`` setting. The plural version takes precedence if it is. available and non-empty. Each item in ``RICHTEXT_FILTERS`` is applied in. order. An alias for the ``richtext_filter`` template filter has been added to. match the plural nature of the new setting: ``richtext_filters`` simply. calls on ``richtext_filter`` for its output - Tim Valenta
* Fixed blog post categories list in ``blog_post_list.html`` template - Artem Gluvchynsky
* Removed redundant jQuery media from KeywordsWidget - Artem Gluvchynsky
* Use urljoin in ``Page.get_absolute_url`` for link pages - Dheeraj Sayala
* RTL: fix position of changelink icon in page tree after recent changes. Problem introduced in aec1a0462b60, which solves an issue due to long. page names - Ahmad Khayyat
* Comma separate categories in blog post listing - Stephen McDonald
* Update docs for new ``RICHTEXT_FILTERS`` setting - Stephen McDonald
* Properly deprecate ``RICHTEXT_FILTER`` setting in favour of ``RICHTEXT_FILTERS`` (plural) setting - Stephen McDonald
* Update templates to use new ``richtext_filters`` (plural) tag - Stephen McDonald
* Allow a single BCC address in addition to list/tuple. BCC fails if the ``addr_bcc`` argument is a single address rather than a list/tuple. This commit wraps a single address in a list to fix this problem - Alex Hill
* Make sure ``request._messages`` has been set before trying to access it. This is for cases where the MessageMiddleware hasn't had a chance to. run, ``e.g`` when a previous middleware returned an exception - Gu1
* Use a separate key setting for nevercache tokens - Stephen McDonald
* Add ``is_current_parent`` on pages filtering - Antoine Catton
* Remove field related to Django built-in user model. South is expecting those fields to be in the database. So it is. selecting them, since some custom user models don't have them, this can. break this migration - Antoine Catton

1.4.8

Not secure
----------------------------

* Fix nginx config to work on more recent ubuntu versions. Not sure how backwards compatible this is. Please see: ``http://stackoverflow.com/questions/8768946/dealing-with-nginx-400-the-plain-http-request-was-sent-to-https-port-error`` - David Novakovic
* dynamically generate top margin of admin content area - Andromeda Yelton
* contentMargin out of global namespace - Andromeda Yelton
* Force csrf token generation on every request with cache middleware. Closes 676 - Stephen McDonald
* Use a more explicit name in ``PageAdmin.get_content_models`` which won't collide with a commonly used field name such as name - Stephen McDonald
* Don't use ``ugettext_lazy`` for form field labels since Django will double-escape them. Closes 682 - Stephen McDonald
* Move case-insensitive keyword creation into KeywordManager, and allow for duplicate results. Closes 679 - Stephen McDonald
* Fix ``ADD_PAGE_ORDER``. Closes 681 - Stephen McDonald
* Fix uses of next param for redirects where param exists but value is empty - Stephen McDonald
* Revert fix to 594 677 - causes issues with status messages - Stephen McDonald
* TagCloser - don't close br and image tags - John Groszko
* Test changes to TagCloser - John Groszko
* Clean up some docstrings - Stephen McDonald
* When using search against an abstract model (eg Displayable), filter the combined models searched against by the models represented in the ``SEARCH_MODEL_CHOICES`` setting. Closes 684 - Stephen McDonald
* Add a note to search docs about ``SEARCH_MODEL_CHOICES`` affecting abstract search behaviour - Stephen McDonald
* Added missing class to collapsible navbar that affected nested menus - Jason Wong
* SS: Moved to the original - Sachin Shende
* long title : break words on pages tree - jferry
* SS: Changes done to Twitter app to upgrade to API 1.1. 1. Added ``requests==1.2.3`` and ``requests-oauthlib==0.3.2`` to the dependency list. 2. Added 4 new keys to the settings. 3. Changed models to use new authentication for Twitter API, changed urls and other changes to parse the response - Sachin Shende
* use of staticfiles to get url to tinymce - Eduardo S. Klein
* Just added my Website to the gallery ;) - Rafael Beckel
* More consistent names and validation of new twitter settings - Stephen McDonald
* Document new requirements for Twitter API - Stephen McDonald
* Fix for Issue 691 - ``ACCOUNTS_APPROVAL_REQUIRED`` bypasses ``ACCOUNTS_VERIFICATION_REQUIRED`` - Ling Thio
* Provide better default for ``FILE_UPLOAD_PERMISSIONS`` - Stephen McDonald
* fixed little firefox bug - jferry
* Improved ssl cipher settings in default nginx conf - Stephen McDonald

1.4.7

Not secure
----------------------------

* Added the ``ACCOUNTS_NO_USERNAME`` setting, which will hide the username field from signup/update forms, but still generate a unique username for use in profile view slugs - Stephen McDonald
* Allow querystring vars to be excluded from pagination links - Stephen McDonald
* Missing migration on site perms. Closes 655 - Stephen McDonald
* Added support for ``setup.py`` test - Stephen McDonald
* Pass in the user to ``page.get_ascendants`` in the page view. This will allow previewing of the unpublished children pages of. unpublished parent pages. fixes 653 - Rocky Meza
* Lowered ``MAX_POSTS_PER_CALL`` to 20; Added support for question/answer posts - Jeff Fein-Worton
* Use a context instance when rendering page menus, huge performance boost - Stephen McDonald
* Fixed rss import errors - Andrey Zhukov
* Fixed the igrations to be able to run with a custom user model. This uses a pattern copied from django-reversion: ``https://github.com/etianen/django-reversion/blob/master/src/reversion/migrations/0001_initial.py`` - Rocky Meza
* Add ``addr_bcc`` arg to ``send_mail_template``. This accommodates the new setting ``SHOP_ORDER_EMAIL_BCC`` in Cartridge - Alex Hill
* Fix lookup for username generation when ``ACCOUNTS_NO_USERNAME`` is True, closes 664 - Stephen McDonald
* Fixed 0005 migration wrt custom user models - Rocky Meza
* Correctly validate float settings in ``mezzanine.conf`` - Stephen McDonald
* Added some validation in the createdb command that fails if a Mezzanine table exists, to prevent people from running it and accidentally faking new migrations that need to be run - Stephen McDonald
* ``mezzanine/accounts/templates/email/account_approved.html:`` removed the extra. "http://" - Alexandre Hajjar
* Make fabfile work in Windows. Two small changes allow deployment via Fabric from Windows: * Use ``posixpath.join`` instead of ``os.path.join`` to construct all paths destined for the remote machine. * Check for ``"fab-file.py"`` as well as "fab" in ``sys.argv``, to handle the way setuptools-generated command-line scripts work in Windows - Alex Hill
* Fix urlpattern for archive year - Stephen McDonald
* Hide printing ``STATIC_ROOT`` in deploys - Stephen McDonald
* Added paragraph to ``mezzanine/docs/user-accounts.rst`` about ``ACCOUNTS_NO_USERNAME``. setting - Alexandre Hajjar
* Used ``username_label`` variable in the PasswordResetForm label. ``(accounts/forms.py)`` - Alexandre Hajjar
* Pin html5lib, see ``https://github.com/jsocol/bleach/issues/94`` - Stephen McDonald
* Added an extra safeguard for type errors in editable settings - Stephen McDonald

1.4.6

Not secure
----------------------------

* Fix ``set_dynamic_settings`` for projects without ``AUTHENTICATION_BACKENDS`` defined - Stephen McDonald
* Provide meaningful exception when dotted import fails - Sam Kingston
* SS: Line 12 ``dsq.src`` changed to include https if the site is runnning on SSL. Comments do not appear if the site is running on SSL and js link is http - Sachin Shende
* Adding Golds Gym Utah - Josh Batchelor
* If ``static_directory`` does not exist, create it. Instead of trying to tar the static directory (which. fails when the dir does not exist), we create it when. is missing - José Aliste
* Hack for generic fields that allows MySQL migrations to run correctly - Stephen McDonald
* Don't assume a site exists in some older migrations - Stephen McDonald
* Use consistent language for 'log in / sign up' - Stephen McDonald
* The ``db_type`` field must take a second 'connection' argument, even though unused, otherwise one gets an 'unexpected keyword argument connection' TypeError - Marcos Scriven
* Added a port of Django's RedirectFallbackMiddleware with support for Mezzanine's multi-site handling. Closes 535 - Stephen McDonald
* Changelist view signature change to work with reversion - Thejaswi Puthraya
* Mark redirects middleware as unused if redirects not installed - Stephen McDonald
* Add special handling in PageMiddleware for non-page views that raise 404s, but do so with a valid page slug - in this case, we use the page view instead, which allows pages to be created that may match non-page urlpatterns. Closes 561 - Stephen McDonald
* Fix CSRF token generation when cache is enabled, should solve 632 - Gu1
* Be more explicit in checking for a test run management command - Stephen McDonald
* Add missing reference for link - Thibault J.
* Fix ``SearchableManager._search_fields`` incorrectly persisting across managers for model subclasses. Closes 633 - Stephen McDonald
* Add code of conduct - Ken Bolton
* New mezzanine-file-collections reference. mezzanine-media-library got renamed to mezzanine-file-collections. The reference was updated in this commit - Thibault J.
* Added the bool setting ``ACCOUNTS_APPROVAL_REQUIRED``, which defaults to False and when set to True, sets newly created public user accounts to inactivate, requiring activation by a staff member. Also added the setting ``ACCOUNTS_APPROVAL_EMAILS`` which can contain a comma separated string of email addresses to send notification emails to each time a new account is created and requires activation. Closes 417 - Stephen McDonald
* Document the new account approval feature - Stephen McDonald
* Better name for ``emails_list`` -> ``split_addresses`` - Stephen McDonald
* Fix thumbnail template tag for palette-mode images. Closes 636 - Stephen McDonald
* Added ``select_related`` for user in ``blog_recent_posts`` template tag - Stephen McDonald
* Fix lookup of initial data in from-builder forms, and correctly handle initial values for checkbox fields - Stephen McDonald
* Allow forms-builder forms to contain template code for default values - Stephen McDonald
* Provide more granular export filtering for multiple-choice fields in forms-builder export, eg matches/doesn't match any/all selected choices, and also allow range filters to use only one boundary - Stephen McDonald
* Fix ``static_proxy`` to work with //host ``STATIC_URLs``. ``STATIC_URL`` = ``'//mybucket.s3.amazonaws.com'`` would break the ``static_proxy`` prefix stripper, and therefore break tinyMCE plugins. This fix adds proper handling of generic-protocol hostnames to the ``static_proxy`` view - Gabe Smedresman
* Reorder blog and accounts patterns in ``mezzanine.urls`` to allow for projects with a blog homepage that also have accounts enabled - Stephen McDonald
* Fix handling of paths in zip imports in galleries app - Stephen McDonald
* accounts: properly reject multiple matching e-mail addresses. Django allows multiple Users with the same e-mail address; the existing. form can throw MultipleObjectsReturned when get(email=email) is called. against such a dataset - mike wakerly
* Added default wsgi script to project template - Stephen McDonald
* Only add input-xlarge on inputs without a class attribute, fixes 643 - Gu1
* Replaced the ``BLOG_URLS_USE_DATE`` setting with a new ``BLOG_URLS_DATE_FORMAT`` setting - it can contain the string year, month, or day, which controls the date granularity in blog post URLs - Stephen McDonald
* Editable settings refactor - this change is to clear up confusion around editable settings being defined in a project's settings module. Previously when this happened, the ``settings.py`` module value would only serve as a default, which would be superceded by the db editable value as soon as the settings admin form is first saved. To address this, this change means that editable settings defined in the project's ``settings.py`` module now mark the setting as not editable, so it will always be the value used. We also include some handling for the migration case so that even with this change, editable settings already in the db that have a ``settings.py`` value defined will still use the db value and provide a warning - Stephen McDonald
* Revert the handling for still using db values for editable settings with ``settings.py`` values defined, since it basically defeats the purpose if a ``settings.py`` value is added once a project is live - Stephen McDonald
* New ``INLINE_EDITING_ENABLED`` setting doesn't need to be editable - Stephen McDonald
* Don't force lowercase keywords. Closes 647 - Stephen McDonald
* Allow blog feed title and description to be overridden - Stephen McDonald
* Use callable description in atom rss feed - Stephen McDonald
* Properly escape comments in ``comment_filter`` template tag - Stephen McDonald

Page 7 of 23

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.