Tim Graham 4352a50871 [1.6.x] Fixed a remote code execution vulnerabilty in URL reversing. ...

Thanks Benjamin Bach for the report and initial patch.

This is a security fix; disclosure to follow shortly.

Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master

2014-04-21 18:30:27 -04:00

..

__init__.py

…

erroneous_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

erroneous_views_module.py

…

extra_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

included_named_urls2.py

…

included_named_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

included_namespace_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

included_urls2.py

…

included_urls.py

…

middleware.py

Fixed #19541 -- Fixed BaseHandler to enable reversing URLs in response middlewares

2013-03-25 03:19:19 +07:00

models.py

…

named_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

namespace_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

no_urls.py

…

nonimported_module.py

[1.6.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:30:27 -04:00

reverse_lazy_urls.py

…

tests.py

[1.6.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:30:27 -04:00

urlconf_inner.py

…

urlconf_outer.py

…

urls_error_handlers_callables.py

Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation.

2013-05-25 16:27:34 -07:00

urls_error_handlers.py

Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation.

2013-05-25 16:27:34 -07:00

urls_without_full_import.py

…

urls.py

[1.6.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:30:27 -04:00

views_broken.py

…

views.py

[1.6.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:30:27 -04:00