django.git/django/core/validators.py, branch stable/6.0.x

Fixed CVE-2025-27556 -- Mitigated potential DoS in url_has_allowed_host_and_scheme() on Windows.

2025-04-02T08:21:33Z

Thank you sw0rd1ight for the report.

Fixed #36014 -- Supported international domains in EmailValidator.

2025-01-08T09:20:11Z

Fixed #36007 -- Removed dead code from URLValidator.

2024-12-13T15:10:34Z

The "Trivial case failed. Try for possible IDN domain" handling was obsoleted by ticket-20003, which adjusted the regular expressions to allow all international domain names (Refs #20003). Uses of `ul` were moved to DomainNameValidator in ticket-18119 (Refs #18119).

Fixed #35845 -- Updated DomainNameValidator to require entire string to be a valid domain name.

2024-10-17T14:45:44Z

Bug in 4971a9afe5642569f3dcfcd3972ebb39e88dd457. Thank you to kazet for the report and Claude Paroz for the review.

Fixed #18119 -- Added a DomainNameValidator validator.

2024-05-21T21:11:12Z

Thanks Claude Paroz for the review. Co-authored-by: Nina Menezes <77671865+nmenezes0@users.noreply.github.com>

Fixed #34818 -- Prevented GenericIPAddressField from mutating error messages.

2023-11-24T04:46:17Z

Co-authored-by: Parth Verma

Fixed #34943 -- Made EmailValidator.eq() ignore domain_allowlist ordering.

2023-10-28T12:35:25Z

Signed-off-by: ksg97031

Fixed #34920 -- Made FileExtensionValidator.eq() ignore allowed_extensions ordering.

2023-10-24T03:31:11Z

Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03T06:16:55Z

Thanks Seokchan Yoon for reports.

Fixed #34473 -- Fixed step validation for form fields with non-zero minimum value.

2023-06-16T06:38:28Z