Fixed #27153 -- Added validation for HttpResponse status.

1 files changed, 7 insertions, 1 deletions

diff --git a/django/http/response.py b/django/http/response.py
index c63b446b21..89c1c0a5fd 100644
--- a/django/http/response.py
+++ b/django/http/response.py
@@ -50,7 +50,13 @@ class HttpResponseBase(six.Iterator):
         self.cookies = SimpleCookie()
         self.closed = False
         if status is not None:
-            self.status_code = status
+            try:
+                self.status_code = int(status)
+            except (ValueError, TypeError):
+                raise TypeError('HTTP status code must be an integer.')
+
+            if not 100 <= self.status_code <= 599:
+                raise ValueError('HTTP status code must be an integer from 100 to 599.')
         self._reason_phrase = reason
         self._charset = charset
         if content_type is None: