angler-fishThe Vulnerability History Project

[1.5.x] Added additional checks in is_safe_url to account for flexible parsing.

      This is a security fix. Disclosure following shortly.
by Jerome the Yellow Eyed Penguin 2014-05-12 13:42:06 UTC
commit ad32c218850ad40972dcef57beb460f8c979dd6d
Django Fix URL Is Not Safe CVE-2014-3730
django/contrib/auth/tests/views.py
+4 -8
django/utils/http.py
-12
tests/regressiontests/utils/http.py
-29
expand_less