django

mirror of https://github.com/django/django.git

Author	SHA1	Message	Date
Florian Apolloner	4b78420d25	Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report.	2019-08-01 09:24:54 +02:00
Florian Apolloner	7f65974f82	Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when truncating HTML. Thanks to Guido Vranken for initial report.	2019-08-01 09:24:54 +02:00
Carlton Gibson	f13147c8de	Added stub release notes for security releases.	2019-07-25 10:49:30 +02:00