django.git/django/utils/encoding.py, branch 4.2.29

[4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04T10:05:35Z

Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report. Co-authored-by: nessita <124304+nessita@users.noreply.github.com>

Updated documentation and comments for RFC updates.

2022-11-10T12:52:17Z

- Updated references to RFC 1123 to RFC 5322 - Only partial as RFC 5322 sort of sub-references RFC 1123. - Updated references to RFC 2388 to RFC 7578 - Except RFC 2388 Section 5.3 which has no equivalent. - Updated references to RFC 2396 to RFC 3986 - Updated references to RFC 2616 to RFC 9110 - Updated references to RFC 3066 to RFC 5646 - Updated references to RFC 7230 to RFC 9112 - Updated references to RFC 7231 to RFC 9110 - Updated references to RFC 7232 to RFC 9110 - Updated references to RFC 7234 to RFC 9111 - Tidied up style of text when referring to RFC documents

Refs #33173 -- Used locale.getlocale() instead of getdefaultlocale().

2022-03-08T12:17:05Z

locale.getdefaultlocale() was deprecated in Python 3.11, see https://bugs.python.org/issue46659.

Refs #33476 -- Reformatted code with Black.

2022-02-07T19:37:05Z

Fixed typos in comments and docs.

2021-05-29T10:51:14Z

Refs #27753 -- Removed django.utils.encoding.force_text() and smart_text() per deprecation timeline.

2021-01-14T16:50:04Z

Capitalized Unicode in docs, strings, and comments.

2020-04-20T10:10:33Z

Refs #28428 -- Made filepath_to_uri() support pathlib.Path.

2019-10-30T12:13:15Z

Refs #27795 -- Removed an unnecessary force_bytes() call in uri_to_iri().

2019-08-28T07:20:46Z

The value returned from urllib.parse.quote() is always a string, so can safely call .encode().

Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri().

2019-08-01T07:24:54Z

Thanks to Guido Vranken for initial report.