1
0
mirror of https://github.com/django/django.git synced 2024-11-19 07:54:07 +00:00
Commit Graph

3 Commits

Author SHA1 Message Date
Tim Graham
011a54315e Made is_safe_url() reject URLs that start with control characters.
This is a security fix; disclosure to follow shortly.
2015-03-18 19:20:07 -04:00
Tim Graham
1c83fc88d6 Fixed an infinite loop possibility in strip_tags().
This is a security fix; disclosure to follow shortly.
2015-03-18 19:20:07 -04:00
Tim Graham
9ddfe9b301 Added stub release notes for security releases. 2015-03-18 19:20:07 -04:00