diff options
| author | Florian Apolloner <florian@apolloner.eu> | 2014-07-17 21:59:28 +0200 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2014-08-20 14:39:40 -0400 |
| commit | 28e765810df46a3f28ff4785491e9973593382fd (patch) | |
| tree | 1f4eb55828ff9cf83a8f7d31df0c3fd1214532ed /tests/urlpatterns_reverse/tests.py | |
| parent | ec71191be0947e22630141e726f0e1f298f930df (diff) | |
Prevented reverse() from generating URLs pointing to other hosts.
This is a security fix. Disclosure following shortly.
Diffstat (limited to 'tests/urlpatterns_reverse/tests.py')
| -rw-r--r-- | tests/urlpatterns_reverse/tests.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/tests/urlpatterns_reverse/tests.py b/tests/urlpatterns_reverse/tests.py index 5603ea5f15..dbb1836b7a 100644 --- a/tests/urlpatterns_reverse/tests.py +++ b/tests/urlpatterns_reverse/tests.py @@ -152,6 +152,9 @@ test_data = ( ('defaults', '/defaults_view2/3/', [], {'arg1': 3, 'arg2': 2}), ('defaults', NoReverseMatch, [], {'arg1': 3, 'arg2': 3}), ('defaults', NoReverseMatch, [], {'arg2': 1}), + + # Security tests + ('security', '/%2Fexample.com/security/', ['/example.com'], {}), ) |