summaryrefslogtreecommitdiff
path: root/docs/ref
diff options
context:
space:
mode:
authorFlorian Apolloner <florian@apolloner.eu>2021-12-27 14:53:18 +0100
committerCarlton Gibson <carlton.gibson@noumenal.es>2022-01-04 10:19:49 +0100
commitc7fe895bca06daf12cc1670b56eaf72a1ef27a16 (patch)
tree3773adc90d7a1d4e0148e0cdcdc42364228bd88a /docs/ref
parenta8b32fe13bcaed1c0b772fdc53de84abc224fb20 (diff)
[3.2.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
Thanks to Dennis Brinkrolf for the report. Co-authored-by: Adam Johnson <me@adamj.eu>
Diffstat (limited to 'docs/ref')
-rw-r--r--docs/ref/templates/builtins.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/ref/templates/builtins.txt b/docs/ref/templates/builtins.txt
index 709f231729..ee7cc0eda3 100644
--- a/docs/ref/templates/builtins.txt
+++ b/docs/ref/templates/builtins.txt
@@ -1586,6 +1586,13 @@ produce empty output::
{{ values|dictsort:"0" }}
+Ordering by elements at specified index is not supported on dictionaries.
+
+.. versionchanged:: 2.2.26
+
+ In older versions, ordering elements at specified index was supported on
+ dictionaries.
+
.. templatefilter:: dictsortreversed
``dictsortreversed``