angler-fishThe Vulnerability History Project

[1.4.x] Added additional checks in is_safe_url to account for flexible parsing.

      This is a security fix. Disclosure following shortly.
by Lindsey the Elephant Seal 2014-05-12 13:46:40 UTC
commit 7feb54bbae3f637ab3c4dd4831d4385964f574df
Django Fix URL Is Not Safe CVE-2014-3730 VCC Spacing Out on URLs CVE-2015-0220 VCC URL Not Validated CVE-2015-2317
django/contrib/auth/tests/views.py
+4 -8
django/utils/http.py
-12
tests/regressiontests/utils/http.py
-30
expand_less