mirror of
https://github.com/django/django.git
synced 2025-06-15 16:39:13 +00:00
9579517552
Migrated remaining response-related logging to use the `log_response()` helper to avoid potential log injection, to ensure untrusted values like request paths are safely escaped. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
15 lines
411 B
Plaintext
15 lines
411 B
Plaintext
===========================
|
|
Django 5.1.11 release notes
|
|
===========================
|
|
|
|
*June 10, 2025*
|
|
|
|
Django 5.1.11 fixes a potential log injection issue in 5.1.10.
|
|
|
|
Bugfixes
|
|
========
|
|
|
|
* Fixed a log injection possibility by migrating remaining response logging
|
|
to ``django.utils.log.log_response()``, which safely escapes arguments such
|
|
as the request path to prevent unsafe log output (:cve:`2025-48432`).
|