09186a13d975de6d049f8b3e05484f66b01ece62 | Vulnerability History Project

The Vulnerability History Project

[2.1.x] Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL before rendering clickable link.

      Backport of deeba6d92006999fee9adfbd8be79bf0a59e8008 from master.

by Stephanie the Jack Russel 2019-05-23 10:06:34 UTC

commit 09186a13d975de6d049f8b3e05484f66b01ece62

Django Fix Unsanitized Clickable Links CVE-2019-12308

django/contrib/admin/templates/admin/widgets/url.html

+1 -1

django/contrib/admin/widgets.py

+1 -9

docs/releases/1.11.21.txt

+1 -15

docs/releases/2.1.9.txt

-14

tests/admin_widgets/tests.py

+8 -15

expand_less