1
0
mirror of https://github.com/django/django.git synced 2025-03-31 19:46:42 +00:00

2 Commits

Author SHA1 Message Date
Tim Graham
2a4113dbd5 [1.7.x] Made is_safe_url() reject URLs that start with control characters.
This is a security fix; disclosure to follow shortly.
2015-03-18 08:51:51 -04:00
Tim Graham
26fd726274 [1.7.x] Added stub release notes for security releases. 2015-03-18 08:50:49 -04:00