2 Commits

Author	SHA1	Message	Date
Tim Graham	011a54315e	Made is_safe_url() reject URLs that start with control characters. ... This is a security fix; disclosure to follow shortly.	2015-03-18 19:20:07 -04:00
Tim Graham	9ddfe9b301	Added stub release notes for security releases.	2015-03-18 19:20:07 -04:00