angler-fishThe Vulnerability History Project

[1.7.x] Made is_safe_url() reject URLs that start with control characters.

      This is a security fix; disclosure to follow shortly.
by Lindsey the Elephant Seal 2015-03-10 00:05:13 UTC
commit 2a4113dbd532ce952308992633d802dc169a75f1
Django Fix URL Not Validated CVE-2015-2317
django/utils/http.py
+2 -8
docs/releases/1.4.20.txt
-19
docs/releases/1.6.11.txt
-19
docs/releases/1.7.7.txt
-19
tests/utils_tests/test_http.py
+1 -3
expand_less