angler-fishThe Vulnerability History Project

[1.8.x] Made is_safe_url() reject URLs that start with control characters.

      This is a security fix; disclosure to follow shortly.
by Lindsey the Elephant Seal 2015-03-10 00:05:13 UTC
commit 770427c2896a078925abfca2317486b284d22f04
Django Fix URL Not Validated CVE-2015-2317 VCC CVE-2016-2512 VCC Unsafe-URLS's CVE-2017-7233
django/utils/http.py
+1 -8
docs/releases/1.4.20.txt
-19
docs/releases/1.6.11.txt
-19
docs/releases/1.7.7.txt
-19
tests/utils_tests/test_http.py
+1 -3
expand_less