mirror of
https://github.com/django/django.git
synced 2025-11-07 07:15:35 +00:00
Fixed catastrophic backtracking in URLValidator.
Thanks João Silva for reporting the problem and Tim Graham for finding the problematic RE and for review. This is a security fix; disclosure to follow shortly.
This commit is contained in:
@@ -7,6 +7,7 @@ http://www.example.com/
|
||||
http://www.example.com:8000/test
|
||||
http://valid-with-hyphens.com/
|
||||
http://subdomain.example.com/
|
||||
http://a.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
|
||||
http://200.8.9.10/
|
||||
http://200.8.9.10:8000/test
|
||||
http://su--b.valid-----hyphens.com/
|
||||
|
||||
Reference in New Issue
Block a user