Ticket #10643: 10643.diff

django/contrib/formtools/utils.py

@@ -15 +15 @@
     order, pickles the result with the SECRET_KEY setting, then takes an md5
     hash of that.
     """
-
-    data = [(bf.name, bf.field.clean(bf.data) or '') for bf in form]
+    if form.empty_permitted and not form.has_changed():
+        data = [(bf.name, bf.data or '') for bf in form]
+    else:
+        data = [(bf.name, bf.field.clean(bf.data) or '') for bf in form]
     data.extend(args)
     data.append(settings.SECRET_KEY)
 

tests/regressiontests/forms/tests.py

@@ -67 +67 @@
     'widgets_tests': widgets_tests,
 }
 
+from django.test import TestCase
+
+class Regression10643(TestCase):
+    def test10643(self):
+        """Check that formtools.utils.security_hash handles forms with
+        empty_permitted=True"""
+        from django import forms
+
+        class BlankForm(forms.Form):
+            name = forms.CharField(max_length=10, required=False)
+        class NotBlankForm(forms.Form):
+            name = forms.CharField(max_length=10)
+        blank_form = BlankForm({})
+        not_blank_form = NotBlankForm({}, empty_permitted=True)
+        
+        from django.contrib.formtools.utils import security_hash
+        self.assertEqual(security_hash(None, blank_form), security_hash(None, not_blank_form))
+
 if __name__ == "__main__":
     import doctest
     doctest.testmod()