django.git/django/utils/html.py, branch 5.0.8

[5.0.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.html.urlize() and AdminURLFieldWidget.

2024-08-06T06:51:55Z

Thanks Seokchan Yoon for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

[5.0.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-08-06T06:51:55Z

Thanks to MProgrammer for the report.

[5.0.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-07-09T13:03:07Z

Thank you to Elias Myllymäki for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Refs #30686 -- Moved Parser.SELF_CLOSING_TAGS to django.utils.html.VOID_ELEMENTS

2023-07-14T08:25:00Z

Fixed #34609 -- Deprecated calling format_html() without arguments.

2023-06-06T12:14:57Z

Refs #34233 -- Used str.removeprefix()/removesuffix().

2023-01-18T18:11:18Z

Updated documentation and comments for RFC updates.

2022-11-10T12:52:17Z

- Updated references to RFC 1123 to RFC 5322 - Only partial as RFC 5322 sort of sub-references RFC 1123. - Updated references to RFC 2388 to RFC 7578 - Except RFC 2388 Section 5.3 which has no equivalent. - Updated references to RFC 2396 to RFC 3986 - Updated references to RFC 2616 to RFC 9110 - Updated references to RFC 3066 to RFC 5646 - Updated references to RFC 7230 to RFC 9112 - Updated references to RFC 7231 to RFC 9110 - Updated references to RFC 7232 to RFC 9110 - Updated references to RFC 7234 to RFC 9111 - Tidied up style of text when referring to RFC documents

Fixed #33779 -- Allowed customizing encoder class in django.utils.html.json_script().

2022-06-28T08:54:38Z

Removed unnecessary str type from @keep_lazy decorator for escape()/escapejs().

2022-02-21T08:46:39Z

Refs #32568 -- Optimized escape() by using SafeString instead of mark_safe().

2022-02-10T05:39:02Z