angler-fishThe Vulnerability History Project

[1.4.X] Fixed #18856 -- Ensured that redirects can't be poisoned by malicious users.
by Leland the Mouse 2012-11-17 21:00:53 UTC
commit b2ae0a63aeec741f1e51bac9a95a27fd635f9652
Django VCC URL Is Not Safe CVE-2014-3730 VCC Spacing Out on URLs CVE-2015-0220 VCC URL Not Validated CVE-2015-2317
django/contrib/auth/views.py
+29 -22
django/contrib/comments/views/comments.py
+7 -4
django/contrib/comments/views/moderation.py
+4 -3
django/contrib/comments/views/utils.py
+4 -6
django/utils/http.py
-12
django/views/i18n.py
+5 -7
tests/regressiontests/comment_tests/tests/comment_view_tests.py
-7
tests/regressiontests/comment_tests/tests/moderation_view_tests.py
+4 -85
tests/regressiontests/views/tests/i18n.py
+1 -16
expand_less