The Vulnerability History Project

Fixed #12512. Changed ModelForm to stop performing model validation on fields that are not part of the form. Thanks, Honza Kral and Ivan Sagalaev.

      This reverts some admin and test changes from [12098] and also fixes #12507, #12520, #12552 and #12553.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@12206 bcc190cf-cafb-0310-a4f2-bffc1f526a37

by Herbert the Moray Eel 2010-01-12 02:29:45 UTC

commit 2f9853b2dc90f30317e0374396f08e3d142844d2

Django VCC CVE-2011-4137 VCC CVE-2011-4138

django/contrib/admin/options.py

+11 -5

django/contrib/auth/forms.py

+8 -8

django/core/exceptions.py

+7 -11

django/db/models/base.py

+30 -78

django/db/models/fields/related.py

-5

django/forms/models.py

+22 -45

docs/ref/models/instances.txt

+17 -74

docs/topics/forms/modelforms.txt

-12

tests/modeltests/model_forms/models.py

+3 -37

tests/modeltests/model_formsets/models.py

-17

tests/modeltests/validation/models.py

+3 -15

tests/modeltests/validation/test_custom_messages.py

+2 -2

tests/modeltests/validation/test_unique.py

+4 -6

tests/modeltests/validation/tests.py

+19 -68

tests/modeltests/validation/validators.py

+3 -3

tests/regressiontests/admin_views/tests.py

+1 -36

tests/regressiontests/inline_formsets/tests.py

+5 -5