mirror of
https://github.com/django/django.git
synced 2025-10-25 22:56:12 +00:00
[1.7.x] Prevented reverse() from generating URLs pointing to other hosts.
This is a security fix. Disclosure following shortly.
This commit is contained in:
committed by
Tim Graham
parent
1c00c38b4a
commit
bf650a2ee7
@@ -151,6 +151,9 @@ test_data = (
|
||||
('defaults', '/defaults_view2/3/', [], {'arg1': 3, 'arg2': 2}),
|
||||
('defaults', NoReverseMatch, [], {'arg1': 3, 'arg2': 3}),
|
||||
('defaults', NoReverseMatch, [], {'arg2': 1}),
|
||||
|
||||
# Security tests
|
||||
('security', '/%2Fexample.com/security/', ['/example.com'], {}),
|
||||
)
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user