angler-fishThe Vulnerability History Project

Fixed #18856 -- Ensured that redirects can't be poisoned by malicious users.
by Leland the Mouse 2012-11-17 21:00:53 UTC
commit a2f2a399566dd68ce7e312fff5a5ba857066797d
Django VCC URL Is Not Safe CVE-2014-3730 VCC Spacing Out on URLs CVE-2015-0220 VCC URL Not Validated CVE-2015-2317 VCC Unsafe-URLS's CVE-2017-7233
django/contrib/auth/views.py
+29 -23
django/contrib/comments/views/comments.py
+5 -3
django/contrib/comments/views/moderation.py
+4 -6
django/contrib/comments/views/utils.py
+8 -9
django/utils/http.py
-12
django/views/i18n.py
+5 -6
tests/regressiontests/comment_tests/tests/comment_view_tests.py
-7
tests/regressiontests/comment_tests/tests/moderation_view_tests.py
+5 -85
tests/regressiontests/views/tests/i18n.py
+1 -16
expand_less