Skip to content

Commit 2802564

Browse files
Refs CVE-2026-4292 -- Isolated new test in AdminViewListEditable.
As originally written, this test interfered with admin_views.tests.SeleniumTests.test_inline_uuid_pk_add_with_popup. To fix this, register the new ModelAdmin with a different AdminSite.
1 parent f86eb5f commit 2802564

2 files changed

Lines changed: 4 additions & 3 deletions

File tree

tests/admin_views/admin.py

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -369,7 +369,7 @@ def get_queryset(self, request):
369369
return super().get_queryset(request).order_by("age")
370370

371371

372-
class ParentWithUUIDPKAdmin(admin.ModelAdmin):
372+
class ParentWithUUIDPKNoAddAdmin(admin.ModelAdmin):
373373
list_display = ("id", "title")
374374
list_editable = ("title",)
375375

@@ -1294,7 +1294,7 @@ class CourseAdmin(admin.ModelAdmin):
12941294
site.register(InlineReferer, InlineRefererAdmin)
12951295
site.register(ReferencedByGenRel)
12961296
site.register(GenRelReference)
1297-
site.register(ParentWithUUIDPK, ParentWithUUIDPKAdmin)
1297+
site.register(ParentWithUUIDPK)
12981298
site.register(RelatedPrepopulated, search_fields=["name"])
12991299
site.register(RelatedWithUUIDPKModel)
13001300
site.register(ReadOnlyRelatedField, ReadOnlyRelatedFieldAdmin)
@@ -1373,6 +1373,7 @@ class CourseAdmin(admin.ModelAdmin):
13731373
site7 = admin.AdminSite(name="admin7")
13741374
site7.register(Article, ArticleAdmin2)
13751375
site7.register(Section)
1376+
site7.register(ParentWithUUIDPK, ParentWithUUIDPKNoAddAdmin)
13761377

13771378

13781379
# Admin for testing optgroup in popup response

tests/admin_views/tests.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4742,7 +4742,7 @@ def test_forged_post_submission_when_no_add_permission(self):
47424742
"_save": "Save",
47434743
}
47444744
# This model admin allows no add permissions.
4745-
changelist_url = reverse("admin:admin_views_parentwithuuidpk_changelist")
4745+
changelist_url = reverse("admin7:admin_views_parentwithuuidpk_changelist")
47464746
response = self.client.post(changelist_url, data)
47474747
self.assertEqual(response.status_code, HTTPStatus.BAD_REQUEST)
47484748
self.assertEqual(ParentWithUUIDPK.objects.count(), before_count)

0 commit comments

Comments
 (0)