angler-fishThe Vulnerability History Project

Made is_safe_url() reject URLs that start with control characters.

      This is a security fix; disclosure to follow shortly.
by Lindsey the Elephant Seal 2015-03-10 00:05:13 UTC
commit 011a54315e46acdf288003566b8570440f5ac985
Django VCC CVE-2016-2512 VCC Unsafe-URLS's CVE-2017-7233
django/utils/http.py
+1 -8
docs/releases/1.4.20.txt
-19
docs/releases/1.6.11.txt
-19
docs/releases/1.7.7.txt
-19
tests/utils_tests/test_http.py
+1 -3
expand_less