django.git/django/utils/html.py, branch 4.2.14

[4.2.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-07-09T13:40:37Z

Thank you to Elias Myllymäki for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Updated documentation and comments for RFC updates.

2022-11-10T12:52:17Z

- Updated references to RFC 1123 to RFC 5322 - Only partial as RFC 5322 sort of sub-references RFC 1123. - Updated references to RFC 2388 to RFC 7578 - Except RFC 2388 Section 5.3 which has no equivalent. - Updated references to RFC 2396 to RFC 3986 - Updated references to RFC 2616 to RFC 9110 - Updated references to RFC 3066 to RFC 5646 - Updated references to RFC 7230 to RFC 9112 - Updated references to RFC 7231 to RFC 9110 - Updated references to RFC 7232 to RFC 9110 - Updated references to RFC 7234 to RFC 9111 - Tidied up style of text when referring to RFC documents

Fixed #33779 -- Allowed customizing encoder class in django.utils.html.json_script().

2022-06-28T08:54:38Z

Removed unnecessary str type from @keep_lazy decorator for escape()/escapejs().

2022-02-21T08:46:39Z

Refs #32568 -- Optimized escape() by using SafeString instead of mark_safe().

2022-02-10T05:39:02Z

Refs #33476 -- Reformatted code with Black.

2022-02-07T19:37:05Z

Fixed #33302 -- Made element_id optional argument for json_script template filter.

2021-11-22T10:52:19Z

Added versionchanged note in documentation

Refs #33245 -- Minor edits to django.utils.html.urlize() changes.

2021-11-03T07:14:50Z

Follow up to ad81b606a2b5276397460a654fc7ad901a54b91e.

Fixed #33245 -- Made django.utils.html.urlize() thread-safe.

2021-11-01T05:27:58Z

Regression in e567670b1abe61af4acfaa6a6a7e92a7acfa8b00.

Fixed #33195 -- Refactored urlize() based on a class.

2021-10-15T07:20:01Z

This allows easier customization/