Release notes Django 5.0 release notes

Django 5.0 introduces the concept of a field group, and field group templates. This simplifies rendering of the related elements of a Django form field such as its label, widget, help text, and errors.

Release notes Django 1.6 release notes

This is consistent with how methods like Form.as_p and Form.as_ul render labels.

Release notes Django 1.6 release notes

All special handling of the help_text attribute of ManyToManyField model fields performed by standard model or model form fields as described in Help text of model form fields for ManyToManyField fields above is deprecated and will be removed in Django …

Release notes Django 1.8 release notes

FormMixin subclasses that override the get_form() method should make sure to provide a default value for the form_class argument since it’s now optional.

Release notes Django 1.11.27 release notes

By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account.

Release notes Django 2.2.9 release notes

By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account.

Release notes Django 3.0.1 release notes

By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account.

Release notes Django 6.1.3 release notes

GeometryField and its widgets logged invalid submitted values directly, allowing control characters (e.g. newlines or ANSI escape sequences) to be written unescaped into logs.

Release notes Django 5.2.19 release notes

GeometryField and its widgets logged invalid submitted values directly, allowing control characters (e.g. newlines or ANSI escape sequences) to be written unescaped into logs.

Release notes Django 6.0.10 release notes

GeometryField and its widgets logged invalid submitted values directly, allowing control characters (e.g. newlines or ANSI escape sequences) to be written unescaped into logs.

Release notes Django 1.8 release notes

Form widgets now render attributes with a value of True or False as HTML5 boolean attributes. The new has_error() method allows checking if a specific error has happened.

Release notes Django 1.11.6 release notes

Made the CharField form field convert whitespace-only values to the empty_value when strip is enabled (#28555). Fixed crash when using the name of a model’s autogenerated primary key (id) in an Index’s fields (#28597).

Release notes Django 5.0 release notes

The DjangoDivFormRenderer and Jinja2DivFormRenderer transitional form renderers are deprecated. Passing positional arguments name and violation_error_message to BaseConstraint is deprecated in favor of keyword-only arguments. request is added to the signature of ModelAdmin.lookup_allowed().

Release notes Django 1.10.6 release notes

Fixed ClearableFileInput’s “Clear” checkbox on model form fields where the model field has a default (#27805). Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than generating a bad request response (#27820).

Release notes Django 1.6 release notes

If you defined your own form widgets and defined the _has_changed method on a widget, you should now define this method on the form field itself.

Release notes Django 1.7 release notes

Calls to WizardView.done() now include a form_dict to allow easier access to forms by their step name.

Release notes Django 5.2 release notes

The new ColorInput form widget is for entering a color in rrggbb hexadecimal format and renders as <input type="color" ...>. Some browsers support a visual color picker interface for this input type.

Release notes Django 1.11 release notes

To ease customizing widgets, form widget rendering is now done using the template system rather than in Python. See The form rendering API. You may need to adjust any custom widgets that you’ve written for a few backwards incompatible changes.

Release notes Django 1.3 release notes

The PasswordInput form widget, intended for use with form fields which represent passwords, accepts a boolean keyword argument render_value indicating whether to send its data back to the browser when displaying a submitted form with errors.

Release notes Django 1.3.6 release notes

Previous versions of Django did not validate or limit the form-count data provided by the client in a formset’s management form, making it possible to exhaust a server’s available memory by forcing it to create very large numbers of forms.