angler-fishThe Vulnerability History Project

[1.6.x] Made is_safe_url() reject URLs that start with control characters.

      This is a security fix; disclosure to follow shortly.
by Lindsey the Elephant Seal 2015-03-10 00:05:13 UTC
commit 5510f070711540aaa8d3707776cd77494e688ef9
Django Fix URL Not Validated CVE-2015-2317
django/utils/http.py
+4 -10
docs/releases/1.4.20.txt
-19
docs/releases/1.6.11.txt
-19
tests/utils_tests/test_http.py
+1 -3
expand_less