Releases: jazzband/django-smart-selects
Releases · jazzband/django-smart-selects
Fix external javascript use cases
Fix USE_DJANGO_JQUERY option
Special thanks to:
- @desecho for PR #204.
- @jacktrades for discussion about security implications of the filtering endpoints
Restrict results to only models with fields from smart_selects
Issue #201 pointed out that the URL endpoints allowed anybody to list arbitrary objects by tweaking the URL parameters.
This release adds checks to the views to ensure that queries return an HTTP 403 (Permission denied) for models that do not have smart_selects fields defined.
Please keep in mind that it is still possible to query models with smart_selects
fields.
Use external Javascript
Should fix adding forms in formsets.
Special thanks to @vborras for doing the heavily lifting.
Fix chained CharField for Django 1.8 & 1.9
- From #188 - fix chained
CharField
for Django >= 1.8 to < 1.10 (with tests)
New release since we haven't had a release in a long time
Amongst other things, contains fixes for:
- [52bc3b0] XSS select dropdown rendering
- [4f817d6] Handle nulls better
- [8b3a681] Regression fixes
- [64fe31c] Don't duplicate jQuery imports
- [f299de9] Flake8
- [b58f7ae] Using horizontal widget in admin
Additionally, we will now attempt to have every future release on both GitHub and PyPI.
Thanks to:
- Maciej "RooTer" Urbański
- Jim Kutter
- savoirfairelinux
- jorgecorrea
Special thanks to:
- Jakub Szafrański