mirror of
https://github.com/django/django.git
synced 2024-12-23 01:25:58 +00:00
parent
d1860a3529
commit
93d5b0d5b6
@ -275,7 +275,7 @@ def is_safe_url(url, host=None):
|
||||
# Chrome treats \ completely as /
|
||||
url = url.replace('\\', '/')
|
||||
# Chrome considers any URL with more than two slashes to be absolute, but
|
||||
# urlaprse is not so flexible. Treat any url with three slashes as unsafe.
|
||||
# urlparse is not so flexible. Treat any url with three slashes as unsafe.
|
||||
if url.startswith('///'):
|
||||
return False
|
||||
url_info = urlparse(url)
|
||||
|
Loading…
Reference in New Issue
Block a user