mirror of
https://github.com/django/django.git
synced 2025-10-23 21:59:11 +00:00
Prevented reverse() from generating URLs pointing to other hosts.
This is a security fix. Disclosure following shortly.
This commit is contained in:
committed by
Tim Graham
parent
ec71191be0
commit
28e765810d
@@ -152,6 +152,9 @@ test_data = (
|
||||
('defaults', '/defaults_view2/3/', [], {'arg1': 3, 'arg2': 2}),
|
||||
('defaults', NoReverseMatch, [], {'arg1': 3, 'arg2': 3}),
|
||||
('defaults', NoReverseMatch, [], {'arg2': 1}),
|
||||
|
||||
# Security tests
|
||||
('security', '/%2Fexample.com/security/', ['/example.com'], {}),
|
||||
)
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user