diff options
| author | Claude Paroz <claude@2xlibre.net> | 2016-03-04 15:41:52 +0100 |
|---|---|---|
| committer | Claude Paroz <claude@2xlibre.net> | 2016-03-04 21:14:14 +0100 |
| commit | ada7a4aefb9bec4c34667b511022be6057102f98 (patch) | |
| tree | c522905824aad554a2d5ffd2a6bd4cc56fbcbd1e /docs | |
| parent | cecbf1bdef04e00e6947f47d96198aa57c2a0dc3 (diff) | |
Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()
This fixes a regression introduced by c5544d28923.
Thanks John Eskew for the reporti and Tim Graham for the review.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/1.8.11.txt | 10 | ||||
| -rw-r--r-- | docs/releases/1.9.4.txt | 10 |
2 files changed, 6 insertions, 14 deletions
diff --git a/docs/releases/1.8.11.txt b/docs/releases/1.8.11.txt index 9837371f7b..b01807129b 100644 --- a/docs/releases/1.8.11.txt +++ b/docs/releases/1.8.11.txt @@ -2,11 +2,7 @@ Django 1.8.11 release notes =========================== -*Under development* +*March 4, 2016* -Django 1.8.11 fixes several bugs in 1.8.10. - -Bugfixes -======== - -* ... +Django 1.8.11 fixes a regression on Python 2 in the 1.8.10 security release +where ``utils.http.is_safe_url()`` crashes on bytestring URLs (:ticket:`26308`). diff --git a/docs/releases/1.9.4.txt b/docs/releases/1.9.4.txt index 15adcee329..d3f66bb7a1 100644 --- a/docs/releases/1.9.4.txt +++ b/docs/releases/1.9.4.txt @@ -2,11 +2,7 @@ Django 1.9.4 release notes ========================== -*Under development* +*March 4, 2016* -Django 1.9.4 fixes several bugs in 1.9.3. - -Bugfixes -======== - -* ... +Django 1.9.4 fixes a regression on Python 2 in the 1.9.3 security release +where ``utils.http.is_safe_url()`` crashes on bytestring URLs (:ticket:`26308`). |