summaryrefslogtreecommitdiff
path: root/docs/ref
diff options
context:
space:
mode:
authorFlorian Apolloner <florian@apolloner.eu>2021-12-27 14:53:18 +0100
committerCarlton Gibson <carlton.gibson@noumenal.es>2022-01-04 10:03:56 +0100
commit761f449e0daf3de06b0132bd4d6dfcdeef578e26 (patch)
tree3665faa206ffb627d944e50e047bc8689d6cacff /docs/ref
parent968a3d01fa79f055f93a1c3ed1535ecbcbdbb842 (diff)
Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
Thanks to Dennis Brinkrolf for the report. Co-authored-by: Adam Johnson <me@adamj.eu>
Diffstat (limited to 'docs/ref')
-rw-r--r--docs/ref/templates/builtins.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/ref/templates/builtins.txt b/docs/ref/templates/builtins.txt
index f02a8f61c8..1fcfa1fa88 100644
--- a/docs/ref/templates/builtins.txt
+++ b/docs/ref/templates/builtins.txt
@@ -1577,6 +1577,13 @@ produce empty output::
{{ values|dictsort:"0" }}
+Ordering by elements at specified index is not supported on dictionaries.
+
+.. versionchanged:: 2.2.26
+
+ In older versions, ordering elements at specified index was supported on
+ dictionaries.
+
.. templatefilter:: dictsortreversed
``dictsortreversed``