mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-03-03 05:24:24 +00:00
Code Issues 32 Releases Wiki Activity
django/docs/releases/1.8.11.txt

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

9 lines
259 B
Plaintext
Raw Normal View History

Added stub release notes for 1.8.11.
2016-03-04 09:47:43 -05:00
===========================
Django 1.8.11 release notes
===========================
Added safety to URL decoding in is_safe_url() on Python 2 The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.
2016-03-04 23:33:35 +01:00
*March 5, 2016*
Added stub release notes for 1.8.11.
2016-03-04 09:47:43 -05:00
Fixed #26308 -- Prevented crash with binary URLs in is_safe_url() This fixes a regression introduced by c5544d28923. Thanks John Eskew for the reporti and Tim Graham for the review.
2016-03-04 15:41:52 +01:00
Django 1.8.11 fixes a regression on Python 2 in the 1.8.10 security release
where ``utils.http.is_safe_url()`` crashes on bytestring URLs (:ticket:`26308`).
Reference in New Issue Copy Permalink