mirror of
https://github.com/django/django.git
synced 2025-10-24 06:06:09 +00:00
Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()
This fixes a regression introduced by c5544d2892.
Thanks John Eskew for the reporti and Tim Graham for the review.
This commit is contained in:
@@ -2,11 +2,7 @@
|
||||
Django 1.8.11 release notes
|
||||
===========================
|
||||
|
||||
*Under development*
|
||||
*March 4, 2016*
|
||||
|
||||
Django 1.8.11 fixes several bugs in 1.8.10.
|
||||
|
||||
Bugfixes
|
||||
========
|
||||
|
||||
* ...
|
||||
Django 1.8.11 fixes a regression on Python 2 in the 1.8.10 security release
|
||||
where ``utils.http.is_safe_url()`` crashes on bytestring URLs (:ticket:`26308`).
|
||||
|
||||
@@ -2,11 +2,7 @@
|
||||
Django 1.9.4 release notes
|
||||
==========================
|
||||
|
||||
*Under development*
|
||||
*March 4, 2016*
|
||||
|
||||
Django 1.9.4 fixes several bugs in 1.9.3.
|
||||
|
||||
Bugfixes
|
||||
========
|
||||
|
||||
* ...
|
||||
Django 1.9.4 fixes a regression on Python 2 in the 1.9.3 security release
|
||||
where ``utils.http.is_safe_url()`` crashes on bytestring URLs (:ticket:`26308`).
|
||||
|
||||
Reference in New Issue
Block a user