mirror of
https://github.com/django/django.git
synced 2025-08-03 18:38:50 +00:00
Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation.
This was a regression introduced by 7deeabc7c7
to address CVE-2019-14234.
Thanks Tim Kleinschmidt for the report and Mariusz for the tests.
This commit is contained in:
parent
bd7e0f81f8
commit
6c3dfba892
7 changed files with 27 additions and 6 deletions
|
@ -2,7 +2,7 @@ import json
|
|||
|
||||
from django.core import checks, exceptions, serializers
|
||||
from django.db import connection
|
||||
from django.db.models.expressions import RawSQL
|
||||
from django.db.models.expressions import OuterRef, RawSQL, Subquery
|
||||
from django.forms import Form
|
||||
from django.test.utils import CaptureQueriesContext, isolate_apps
|
||||
|
||||
|
@ -207,6 +207,12 @@ class TestQuerying(PostgreSQLTestCase):
|
|||
queries[0]['sql'],
|
||||
)
|
||||
|
||||
def test_obj_subquery_lookup(self):
|
||||
qs = HStoreModel.objects.annotate(
|
||||
value=Subquery(HStoreModel.objects.filter(pk=OuterRef('pk')).values('field')),
|
||||
).filter(value__a='b')
|
||||
self.assertSequenceEqual(qs, self.objs[:2])
|
||||
|
||||
|
||||
@isolate_apps('postgres_tests')
|
||||
class TestChecks(PostgreSQLSimpleTestCase):
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue