The Vulnerability History Project
Vulnerabilities
Insights
Curate
Tags
All
Projects
CWEs
Languages
Lessons
Severities
Subsystems
More
News
Projects We Study
How to Contribute
By the Numbers
About Us
Toggle Theme
Warning: Our website does not support Internet Explorer, please use Edge instead.
[1.7.x] Fixed is_safe_url() to handle leading whitespace.
This is a security fix. Disclosure following shortly.
by
Lindsey the Elephant Seal 2014-12-03 21:14:00 UTC
commit de67dedc771ad2edec15c1d00c083a1a084e1e89
Django
Fix
Spacing Out on URLs CVE-2015-0220
django/utils/http.py
-1
docs/releases/1.4.18.txt
-14
docs/releases/1.6.10.txt
-14
docs/releases/1.7.3.txt
-14
tests/utils_tests/test_http.py
+1
-2
expand_less