angler-fishThe Vulnerability History Project

[1.6.x] Fixed is_safe_url() to handle leading whitespace.

      This is a security fix. Disclosure following shortly.
by Lindsey the Elephant Seal 2014-12-03 21:14:00 UTC
commit 72e0b033662faa11bb7f516f18a132728aa0ae28
Django Fix Spacing Out on URLs CVE-2015-0220
django/utils/http.py
-1
docs/releases/1.4.18.txt
-14
docs/releases/1.6.10.txt
-14
tests/utils_tests/test_http.py
+1 -2
expand_less