From e05f2a75695b5f5faa7682d4053db4776d4d6f93 Mon Sep 17 00:00:00 2001 From: varunkasyap Date: Sat, 15 Nov 2025 10:36:46 +0530 Subject: Fixed #36733 -- Escaped attributes in Stylesheet.__str__(). Thanks Mustafa Barakat for the report, Baptiste Mispelon for the triage, and Jake Howard for the review. --- docs/releases/5.2.9.txt | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/releases/5.2.9.txt b/docs/releases/5.2.9.txt index 5698bdc206..0d726de640 100644 --- a/docs/releases/5.2.9.txt +++ b/docs/releases/5.2.9.txt @@ -9,4 +9,7 @@ Django 5.2.9 fixes several bugs in 5.2.8. Bugfixes ======== -* ... +* Fixed a bug in Django 5.2 where + ``django.utils.feedgenerator.Stylesheet.__str__()`` did not escape + the ``url``, ``mimetype``, and ``media`` attributes, potentially leading + to invalid XML markup (:ticket:`36733`). -- cgit v1.3