angler-fishThe Vulnerability History Project

Added safety to URL decoding in is_safe_url() on Python 2

      The errors='replace' parameter to force_text altered the URL before checking
it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.
by Nick the Sea Slug 2016-03-04 22:33:35 UTC
commit 552f03869ea7f3072b3fa19ffb6cb2d957fd8447
Django VCC Unsafe-URLS's CVE-2017-7233
django/utils/http.py
+1 -4
docs/releases/1.8.11.txt
+1 -1
docs/releases/1.9.4.txt
+1 -1
tests/utils_tests/test_http.py
+1 -1
expand_less