django.git/tests/utils_tests/test_html.py, branch 5.1.14

[5.1.x] Fixed #36499 -- Adjusted utils_tests.test_html.TestUtilsHtml.test_strip_tags following Python's HTMLParser new behavior.

2025-08-13T20:49:04Z

Python fixed a quadratic complexity processing for HTMLParser in: https://github.com/python/cpython/commit/6eb6c5db. Backport of 2980627502c84a9fd09272e1349dc574a2ff1fb1 from main.

[5.1.x] Fixed CVE-2025-32873 -- Mitigated potential DoS in strip_tags().

2025-05-07T01:31:16Z

Thanks to Elias Myllymäki for the report, and Shai Berger and Jake Howard for the reviews. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 9f3419b519799d69f2aba70b9d25abe2e70d03e0 from main.

[5.1.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags().

2024-12-04T12:47:21Z

Thanks to jiangniao for the report, and Shai Berger and Natalia Bidart for the reviews.

[5.1.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-09-03T12:24:13Z

Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.

[5.1.x] Refs #34609 -- Fixed deprecation warning stack level in format_html().

2024-08-27T18:17:47Z

Co-authored-by: Simon Charette Backport of 2b71b2c8dcd40f2604310bb3914077320035b399 from main.

[5.1.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.html.urlize() and AdminURLFieldWidget.

2024-08-06T06:51:22Z

Thanks Seokchan Yoon for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

[5.1.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-08-06T06:51:22Z

Thanks to MProgrammer for the report.

[5.1.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-07-09T12:42:12Z

Thank you to Elias Myllymäki for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Fixed #34609 -- Deprecated calling format_html() without arguments.

2023-06-06T12:14:57Z

Fixed #33779 -- Allowed customizing encoder class in django.utils.html.json_script().

2022-06-28T08:54:38Z