Florian Apolloner da051da8df [1.6.x] Prevented reverse() from generating URLs pointing to other hosts. ...

This is a security fix. Disclosure following shortly.

2014-08-20 11:43:43 -04:00

..

__init__.py

…

erroneous_urls.py

…

erroneous_views_module.py

…

extra_urls.py

…

included_named_urls2.py

…

included_named_urls.py

…

included_namespace_urls.py

…

included_urls2.py

…

included_urls.py

…

middleware.py

Fixed #19541 -- Fixed BaseHandler to enable reversing URLs in response middlewares

2013-03-25 03:19:19 +07:00

models.py

…

named_urls.py

…

namespace_urls.py

…

no_urls.py

…

nonimported_module.py

[1.6.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:30:27 -04:00

reverse_lazy_urls.py

…

tests.py

[1.6.x] Prevented reverse() from generating URLs pointing to other hosts.

2014-08-20 11:43:43 -04:00

urlconf_inner.py

…

urlconf_outer.py

…

urls_error_handlers_callables.py

Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation.

2013-05-25 16:27:34 -07:00

urls_error_handlers.py

Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation.

2013-05-25 16:27:34 -07:00

urls_without_full_import.py

…

urls.py

[1.6.x] Prevented reverse() from generating URLs pointing to other hosts.

2014-08-20 11:43:43 -04:00

views_broken.py

…

views.py

[1.6.x] Fixed #22486 -- Restored the ability to reverse views created using functools.partial.

2014-04-23 08:56:13 -04:00