Ticket #9119: ignore_non_field_params_against_9066.diff

django/contrib/admin/views/main.py

@@ -181 +181 @@
                 # 'key' will be used as a keyword argument later, so Python
                 # requires it to be a string.
                 del lookup_params[key]
-                lookup_params[smart_str(key)] = value
+                key = smart_str(key)
+                lookup_params[key] = value
 
+            # ignore parameters that are no field lookups
+            from django.db.models.sql.constants import LOOKUP_SEP
+            try:
+                field = self.opts.get_field(key.split(LOOKUP_SEP)[0])
+            except models.FieldDoesNotExist:
+                del lookup_params[key]
+                continue
+
             # if key ends with __in, split parameter into separate values
             if key.endswith('__in'):
                 lookup_params[key] = value.split(',')