angler-fishThe Vulnerability History Project

[1.9.x] Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.

      This is a security fix.
by Lindsey the Elephant Seal 2017-03-14 14:46:53 UTC
commit 254326cb3682389f55f886804d2c43f7b9f23e4f
Django Fix Unsafe-URLS's CVE-2017-7233
django/utils/http.py
+2 -65
docs/releases/1.8.18.txt
-12
docs/releases/1.9.13.txt
-12
tests/utils_tests/test_http.py
+1 -4
expand_less