c238701859a52d584f349cce15d56c8e8137c52b | Vulnerability History Project

The Vulnerability History Project

[1.11.x] Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL before rendering clickable link.

      Backport of deeba6d92006999fee9adfbd8be79bf0a59e8008 from master.

by Stephanie the Jack Russel 2019-05-27 10:10:02 UTC

commit c238701859a52d584f349cce15d56c8e8137c52b

Django Fix Unsanitized Clickable Links CVE-2019-12308

django/contrib/admin/templates/admin/widgets/url.html

+1 -1

django/contrib/admin/widgets.py

+1 -9

docs/releases/1.11.21.txt

+1 -15

tests/admin_widgets/tests.py

+8 -14

expand_less