1
0
mirror of https://github.com/django/django.git synced 2025-11-07 07:15:35 +00:00

Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().

This is a security fix.
This commit is contained in:
Tim Graham
2017-03-14 12:33:15 -04:00
parent b9ebf6c0c2
commit a1f948b468
5 changed files with 38 additions and 19 deletions

View File

@@ -110,7 +110,7 @@ class StaticTests(SimpleTestCase):
def test_index(self):
response = self.client.get('/%s/' % self.prefix)
self.assertContains(response, 'Index of /')
self.assertContains(response, 'Index of ./')
class StaticHelperTest(StaticTests):