Releases: aksharahegde/django-jet-3-calm
logout not allowed using GET method
Logging out via GET requests to the built-in logout view is deprecated. Use POST requests instead.
Details:
https://docs.djangoproject.com/en/5.0/releases/4.1/#features-deprecated-in-4-1
Removed `re_path as url` to solve ambiguity with compliance with Django 4+
- Upgraded - postcss from 8.4.32 to 8.4.32.
- Refactor - removed as url in urls.py for re_path and used re_path to remove ambiguity.
Pre-release to Django 5
-
Upgraded Django from 4.2.1 to 4.2.8
-
Replaced deprecated django template filter - length_is with length.
-
Replaced the deprecated library - jquery.cookie with js-cookie
-
Upgraded jQuery from 3.6.1 to 3.6.4
-
Upgraded PostCSS from 8.4.24 to 8.4.32
Updated readme to include jquery and jquery-ui upgrade details
Fixed - Broken UI after logged-out in Django 4.2
- Removed dark mode switcher of Django 4.2 which was overlapping JET sidebar after user logging-out.
- Upgraded
node-sass
andpostcss
- Updated
caniuse-lite
No admin filter toolbar for Django v4.1.5
Fixed issue in admin toolbar where filter dropdowns are not rendering due to change in filter template by official django admin.
What's Changed
- Fixed - No filter toolbar for Django 4.1.5 by @aksharahegde in #12
Full Changelog: v5.1.2...v5.1.3
Native change event for select2
- Emit native change for select2.
- Added a new theme
primary
. - Fixed - Error while initiating click event listener on action submit button.
Fixed - select2 bulk selection and deselection
Fixed - select all and deselect all button in select2
JET dashboard module compatibility issues, datepicker improvement
Fixed - JET Dashboard module compatibility issues with jquery-ui 1.13.2
Date Picker
- Enabled month and year selection.
- Fixed - Next and Previous month movement icon.
Jquery UI upgrade - 1.11.4 to 1.13.2
- Upgraded jquery-ui from 1.11.4 to 1.13.2.
- Migrated JET widgets to be compatible with latest jquery-ui.
This release fixes following vulnerabilities:
Identifier
CVE-2021-41182
Description
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField
option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField
option is now treated as a CSS selector. A workaround is to not accept the value of the altField
option from untrusted sources.
Affected versions
< 1.13.0
Identifier
CVE-2021-41183
Description
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various *Text
options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various *Text
options are now always treated as pure text, not HTML. A workaround is to not accept the value of the *Text
options from untrusted sources.
Affected versions
< 1.13.0
Identifier
CVE-2021-41184
Description
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the of
option of the .position()
util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the of
option is now treated as a CSS selector. A workaround is to not accept the value of the of
option from untrusted sources.
Affected versions
< 1.13.0