[django/django] d9d4d6: [1.5.x] Fixed #23431 -- Allowed inline and hidden ...

[GitHub]

Branch: refs/heads/stable/1.5.x
Home: https://github.com/django/django
Commit: d9d4d62d8539fc3b72c979c04d11e160bc8fff9d
https://github.com/django/django/commit/d9d4d62d8539fc3b72c979c04d11e160bc8fff9d
Author: Simon Charette <chare...@gmail.com>
Date: 2014-09-08 (Mon, 08 Sep 2014)

Changed paths:
M django/contrib/admin/options.py
A docs/releases/1.4.16.txt
A docs/releases/1.5.11.txt
M docs/releases/index.txt
M tests/regressiontests/admin_views/admin.py
M tests/regressiontests/admin_views/models.py
M tests/regressiontests/admin_views/tests.py

Log Message:
-----------
[1.5.x] Fixed #23431 -- Allowed inline and hidden references to admin fields.

This fixes a regression introduced by the 53ff096982 security fix.

Thanks to @a1tus for the report and Tim for the review.

refs #23329.

Backport of 342ccbd from master