django.git/tests/utils_tests/test_html.py, branch 5.1.5 django http://cgit.adnoto.dev/django.git/atom?h=5.1.5 2024-12-04T12:47:21Z [5.1.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags(). 2024-12-04T12:47:21Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2024-11-13T14:06:23Z urn:sha1:bbc74a7f7eb7335e913bdb4787f22e83a9be947e Thanks to jiangniao for the report, and Shai Berger and Natalia Bidart for the reviews. [5.1.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizetrunc template filters. 2024-09-03T12:24:13Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2024-08-12T13:17:57Z urn:sha1:022ab0a75c76ab2ea31dfcc5f2cf5501e378d397 Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report. [5.1.x] Refs #34609 -- Fixed deprecation warning stack level in format_html(). 2024-08-27T18:17:47Z Adam Johnson me@adamj.eu 2024-08-27T18:14:50Z urn:sha1:03e0ab5c64d4bc09c6932268b29efcc789a0f7af Co-authored-by: Simon Charette <charette.s@gmail.com> Backport of 2b71b2c8dcd40f2604310bb3914077320035b399 from main. [5.1.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.html.urlize() and AdminURLFieldWidget. 2024-08-06T06:51:22Z Mariusz Felisiak felisiak.mariusz@gmail.com 2024-07-10T18:30:12Z urn:sha1:bd807c0c25ab69361a4c08edcc1cf04d4652aa0a Thanks Seokchan Yoon for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> [5.1.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizetrunc template filters. 2024-08-06T06:51:22Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2024-07-18T11:19:34Z urn:sha1:0c1a8909164d8f2846322efb1143b72ad1616bd8 Thanks to MProgrammer for the report. [5.1.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters. 2024-07-09T12:42:12Z Adam Johnson me@adamj.eu 2024-06-24T13:30:59Z urn:sha1:44aef996c8d723198e89ca834cb1d746e2e72d77 Thank you to Elias Myllymäki for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> Fixed #34609 -- Deprecated calling format_html() without arguments. 2023-06-06T12:14:57Z devilsautumn bhuvnesh875@gmail.com 2023-06-06T08:56:53Z urn:sha1:094b0bea2ce76db9d3dc06c384d4ac3b22705810 Fixed #33779 -- Allowed customizing encoder class in django.utils.html.json_script(). 2022-06-28T08:54:38Z Hrushikesh Vaidya hrushikeshrv@gmail.com 2022-06-23T08:50:20Z urn:sha1:72e41a0df6db23410135364223eeda83ac2a8b27 Rewrote strip_tags test file to lorem ipsum. 2022-03-08T13:50:06Z Adam Johnson me@adamj.eu 2022-03-06T10:08:05Z urn:sha1:a45f28f0ecd830c4e5683d46d6b454861ba912b3 Refs #33476 -- Refactored code to strictly match 88 characters line length. 2022-02-07T19:37:05Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-02-04T07:08:27Z urn:sha1:7119f40c9881666b6f9b5cf7df09ee1d21cc8344