angler-fishThe Vulnerability History Project

Fixed #20348 -- Consistently handle Promise objects in model fields.

      All Promise objects were passed to force_text() deep in ORM query code.
Not only does this make it difficult or impossible for developers to
prevent or alter this behaviour, but it is also wrong for non-text
fields.

This commit changes `Field.get_prep_value()` from a no-op to one that
resolved Promise objects. All subclasses now call super() method first
to ensure that they have a real value to work with.
    
commit 31e6d58d46894ca35080b4eab7967e4c6aae82d4
-1
+1 -15
-1
+12
+13 -178
expand_less