angler-fishThe Vulnerability History Project

[1.8.x] Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth.

      This is a security fix.
by Clayton the Whippet 2016-02-22 21:55:51 UTC
commit 382ab137312961ad62feb8109d70a5a581fe8350
Django Fix CVE-2016-2512 VCC Unsafe-URLS's CVE-2017-7233
django/utils/http.py
+2 -6
docs/releases/1.8.10.txt
-16
tests/utils_tests/test_http.py
-12
expand_less