[django/django] 065caa: [1.4.x] Fixed #23431 -- Allowed inline and hidden ...

[GitHub]

Branch: refs/heads/stable/1.4.x
Home: https://github.com/django/django
Commit: 065caafa70b6c422f73e364a4c241b6538969d7b
https://github.com/django/django/commit/065caafa70b6c422f73e364a4c241b6538969d7b
Author: Simon Charette <chare...@gmail.com>
Date: 2014-09-08 (Mon, 08 Sep 2014)

Changed paths:
M django/contrib/admin/options.py
A docs/releases/1.4.16.txt
M docs/releases/index.txt
M tests/regressiontests/admin_views/admin.py
M tests/regressiontests/admin_views/models.py
M tests/regressiontests/admin_views/tests.py

Log Message:
-----------
[1.4.x] Fixed #23431 -- Allowed inline and hidden references to admin fields.

This fixes a regression introduced by the 53ff096982 security fix.

Thanks to @a1tus for the report and Tim for the review.

refs #23329.

Backport of 342ccbd from master