mirror of
				https://github.com/django/django.git
				synced 2025-10-31 09:41:08 +00:00 
			
		
		
		
	[1.8.x] Fixed an infinite loop possibility in strip_tags().
This is a security fix; disclosure to follow shortly.
This commit is contained in:
		| @@ -82,6 +82,9 @@ class TestUtilsHtml(TestCase): | ||||
|             ('a<p a >b</p>c', 'abc'), | ||||
|             ('d<a:b c:d>e</p>f', 'def'), | ||||
|             ('<strong>foo</strong><a href="http://example.com">bar</a>', 'foobar'), | ||||
|             # caused infinite loop on Pythons not patched with | ||||
|             # http://bugs.python.org/issue20288 | ||||
|             ('&gotcha&#;<>', '&gotcha&#;<>'), | ||||
|         ) | ||||
|         for value, output in items: | ||||
|             self.check_output(f, value, output) | ||||
|   | ||||
		Reference in New Issue
	
	Block a user