Tim Graham 546740544d [1.7.x] Fixed a remote code execution vulnerabilty in URL reversing. ...

Thanks Benjamin Bach for the report and initial patch.

This is a security fix; disclosure to follow shortly.

Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master

2014-04-21 18:29:12 -04:00

..

__init__.py

Merged regressiontests and modeltests into the test root.

2013-02-26 14:36:57 +01:00

erroneous_urls.py

Renamed some tests and removed references to modeltests/regressiontests.

2013-02-26 14:36:57 +01:00

erroneous_views_module.py

Fixing E302 Errors

2013-11-02 23:48:47 -05:00

extra_urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

included_named_urls2.py

Whitespace cleanup.

2013-10-10 16:49:20 -04:00

included_named_urls.py

Whitespace cleanup.

2013-10-10 16:49:20 -04:00

included_namespace_urls.py

Whitespace cleanup.

2013-10-10 16:49:20 -04:00

included_no_kwargs_urls.py

Fixed #7571 -- Fixed parameter matching in include()'d urlpattern

2014-03-05 00:35:03 +01:00

included_urls2.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

included_urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

middleware.py

Fixing E302 Errors

2013-11-02 23:48:47 -05:00

named_urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

namespace_urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

no_urls.py

Whitespace cleanup.

2013-10-10 16:49:20 -04:00

nonimported_module.py

[1.7.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:29:12 -04:00

reverse_lazy_urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

tests.py

[1.7.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:29:12 -04:00

urlconf_inner.py

Fixing E302 Errors

2013-11-02 23:48:47 -05:00

urlconf_outer.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

urls_error_handlers_callables.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

urls_error_handlers.py

Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation.

2013-05-25 16:27:34 -07:00

urls_without_full_import.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

urls.py

[1.7.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:29:12 -04:00

views_broken.py

Merged regressiontests and modeltests into the test root.

2013-02-26 14:36:57 +01:00

views.py

[1.7.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:29:12 -04:00