summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorvarunkasyap <varunkasyap@hotmail.com>2025-11-15 10:36:46 +0530
committerJacob Walls <jacobtylerwalls@gmail.com>2025-11-18 17:16:27 -0500
commitef4715ef695604a417d15390e42c43851ca5d0ff (patch)
tree759441332a8fea0d29331dff188472ef1e71ca50 /docs
parent569f455b589039d1a123d7c27b6e2fd0d2c795df (diff)
[6.0.x] Fixed #36733 -- Escaped attributes in Stylesheet.__str__().
Thanks Mustafa Barakat for the report, Baptiste Mispelon for the triage, and Jake Howard for the review. Backport of e05f2a75695b5f5faa7682d4053db4776d4d6f93 from main.
Diffstat (limited to 'docs')
-rw-r--r--docs/releases/5.2.9.txt5
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/releases/5.2.9.txt b/docs/releases/5.2.9.txt
index 5698bdc206..0d726de640 100644
--- a/docs/releases/5.2.9.txt
+++ b/docs/releases/5.2.9.txt
@@ -9,4 +9,7 @@ Django 5.2.9 fixes several bugs in 5.2.8.
Bugfixes
========
-* ...
+* Fixed a bug in Django 5.2 where
+ ``django.utils.feedgenerator.Stylesheet.__str__()`` did not escape
+ the ``url``, ``mimetype``, and ``media`` attributes, potentially leading
+ to invalid XML markup (:ticket:`36733`).