angler-fishThe Vulnerability History Project

Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S.

      This is a security fix; disclosure to follow shortly.
by Kristine the Pool Frog 2013-08-13 16:06:22 UTC
commit ae3535169af804352517b7fea94a42a1c9c4b762
Django Fix CVE-2013-6044 VCC URL Is Not Safe CVE-2014-3730 VCC URL Not Validated CVE-2015-2317
django/contrib/auth/tests/test_views.py
+2 -6
django/utils/http.py
+3 -4
expand_less