diff options
Diffstat (limited to 'topics/release-notes.html')
| -rw-r--r-- | topics/release-notes.html | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/topics/release-notes.html b/topics/release-notes.html index 4f8ebe66..d3c6a059 100644 --- a/topics/release-notes.html +++ b/topics/release-notes.html @@ -242,6 +242,15 @@ a.fusion-poweredby { </code></pre> <hr /> <h2 id="24x-series">2.4.x series</h2> +<h3 id="244">2.4.4</h3> +<p><strong>Date</strong>: <a href="https://github.com/tomchristie/django-rest-framework/issues?q=milestone%3A%222.4.4+Release%22+">3rd November 2014</a>.</p> +<ul> +<li><strong>Security fix</strong>: Escape URLs when replacing <code>format=</code> query parameter, as used in dropdown on <code>GET</code> button in browsable API to allow explicit selection of JSON vs HTML output.</li> +<li>Maintain ordering of URLs in API root view for <code>DefaultRouter</code>.</li> +<li>Fix <code>follow=True</code> in <code>APIRequestFactory</code></li> +<li>Resolve issue with invalid <code>read_only=True</code>, <code>required=True</code> fields being automatically generated by <code>ModelSerializer</code> in some cases.</li> +<li>Resolve issue with <code>OPTIONS</code> requests returning incorrect information for views using <code>get_serializer_class</code> to dynamically determine serializer based on request method. </li> +</ul> <h3 id="243">2.4.3</h3> <p><strong>Date</strong>: <a href="https://github.com/tomchristie/django-rest-framework/issues?q=milestone%3A%222.4.3+Release%22+">19th September 2014</a>.</p> <ul> |