angler-fishThe Vulnerability History Project

[1.4.x] Fixed is_safe_url() to handle leading whitespace.

      This is a security fix. Disclosure following shortly.
by Lindsey the Elephant Seal 2014-12-03 21:14:00 UTC
commit 4c241f1b710da6419d9dca160e80b23b82db7758
Django Fix Spacing Out on URLs CVE-2015-0220
django/utils/http.py
-1
docs/releases/1.4.18.txt
-14
tests/regressiontests/utils/http.py
+3 -4
expand_less