9e08dd17ad
Accepting request 1251789 from devel:languages:python
Ana Guerrero2025-03-11 19:44:00 +00:00
3cbf85b10a
- Update to 3.1.6 * The `|attr` filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks.
Markéta Machová2025-03-10 12:18:59 +00:00
09ed88b74a
Accepting request 1233561 from devel:languages:python
Ana Guerrero2024-12-30 11:50:36 +00:00
fa8ac278d2
- Update to 3.1.5 - drop fix-ftbfs-with-python313.patch, merged upstream
Nico Krapp2024-12-27 13:13:52 +00:00
f561f1629c
Accepting request 1202972 from devel:languages:python
Ana Guerrero2024-09-25 19:52:57 +00:00
3e785a3c5f
- update to 3.1.4 (bsc#1223980, CVE-2024-34064): * The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first.
Dirk Mueller2024-05-06 18:11:54 +00:00
ad467f3c8d
Accepting request 1142212 from devel:languages:python
Ana Guerrero2024-01-29 21:26:58 +00:00
b48e3e3f2d
- Disable broken test with latest version of MarkupSafe (2.1.4) (gh#pallets/jinja#1930, gh#pallets/markupsafe#417)
Daniel Garcia2024-01-29 10:12:28 +00:00
86c88b9cce
Accepting request 1138254 from devel:languages:python
Ana Guerrero2024-01-14 18:01:12 +00:00
6d8e93bca6
- update to 3.1.3 (bsc#1218722, CVE-2024-22195): * Fix compiler error when checking if required blocks in parent templates are xmlattr filter does not allow keys with spaces. * Make error messages stemming from invalid nesting of {% trans %} blocks more helpful. :pr:1916 - Security issue: Corrected the security fix for the cache folder. - avoid rebuildcycle with vim - Add suggests for vim and emacs in their respective
Dirk Mueller2024-01-12 09:36:22 +00:00
64fcb179e4
Accepting request 1109082 from devel:languages:python
Ana Guerrero2023-09-06 16:56:32 +00:00
99fd2ac438
- update to 2.11.3 * Improve the speed of the urlize filter by reducing regex backtracking. and only word characters in the TLD (CVE-2020-28493 bsc#1181944). - drops CVE-2020-28493.patch in older dists
Dirk Mueller2023-09-05 15:18:02 +00:00
53be6e047d
- update to 3.1.2: * Add parameters to `Environment.overlay to match __init__. * Handle race condition in FileSystemBytecodeCache. :issue:1654`
Dirk Mueller2022-06-04 11:36:36 +00:00
8cf69a50fd
Accepting request 965224 from home:apersaud:branches:devel:languages:python
Matej Cepl2022-03-28 05:36:36 +00:00
fa61b789b2
- Add no-warnings-as-errors.patch: * Do not treat warnings as errors until upstream fix using async loops.
Steve Kowalik2021-09-10 08:08:45 +00:00
2c1018a7cb
- update to 2.11.1 * Fix a bug that prevented looking up a key after an attribute ({{ data.items[1:] }}) in an async template * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version to support Python 2.7 and 3.5. * Added a new ChainableUndefined class to support getitem and getattr on an undefined object. * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled. * Added a default parameter for the map filter. * Exclude environment globals from meta.find_undeclared_variables(). * Float literals can be written with scientific notation, like 2.56e-3. * Int and float literals can be written with the ‘_’ separator for legibility, like 12_345. * Fix a bug causing deadlocks in LRUCache.setdefault * The trim filter takes an optional string of characters to trim. * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump the current context and available filters and tests. * Lexing templates with large amounts of whitespace is much faster. * Parentheses around comparisons are preserved, so {{ 2 * (3 < 5) }} outputs “2” instead of “False”. * Add new boolean, false, true, integer and float tests. * The environment’s finalize function is only applied to the output of expressions (constant or not), not static template data. * When providing multiple paths to FileSystemLoader, a template can have the same name as a directory. * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }} expression, regardless of the environment’s undefined class. Omitting the else clause is a valid shortcut and should not raise an error when using StrictUndefined. * Fix behavior of loop control variables such as length and revindex0 when
Ondřej Súkup2020-02-18 17:34:49 +00:00
3bb888be77
- Update to 2.10.3: * Fix Python 3.7 deprecation warnings. * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:933 * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:1050 * Fix a typo in Babel entry point in setup.py that was preventing installation. - Remove merged python38.patch
Tomáš Chvátal
2019-10-07 13:42:06 +00:00
Ana Guerrero
Daniel Garcia
Markéta Machová
Nico Krapp
Dominique Leuenberger
Dirk Mueller
Matej Cepl
Steve Kowalik
Tomáš Chvátal
Ondřej Súkup
Thomas Bechtold
Robert Schweikert
Stephan Kulow
Denisart Benjamin
Ludwig Nussel
Michal Čihař
Todd R
Tomáš Chvátal
Sascha Peilicke