1
0
mirror of https://github.com/django/django.git synced 2024-12-29 12:36:08 +00:00
Commit Graph

2 Commits

Author SHA1 Message Date
Tim Graham
011a54315e Made is_safe_url() reject URLs that start with control characters.
This is a security fix; disclosure to follow shortly.
2015-03-18 19:20:07 -04:00
Tim Graham
9ddfe9b301 Added stub release notes for security releases. 2015-03-18 19:20:07 -04:00