From 94c5da1d17a6b0d378866c66b605102c19f7988c Mon Sep 17 00:00:00 2001
From: Tim Graham <timograham@gmail.com>
Date: Sat, 24 Feb 2018 16:22:43 -0500
Subject: [2.0.x] Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in
 django.utils.text.Truncator.

Thanks James Davis for suggesting the fix.
---
 tests/utils_tests/test_text.py | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'tests/utils_tests')

diff --git a/tests/utils_tests/test_text.py b/tests/utils_tests/test_text.py
index 89f9716bb5..693c436eb8 100644
--- a/tests/utils_tests/test_text.py
+++ b/tests/utils_tests/test_text.py
@@ -136,6 +136,10 @@ class TestUtilsText(SimpleTestCase):
         truncator = text.Truncator('<p>I &lt;3 python, what about you?</p>')
         self.assertEqual('<p>I &lt;3 python...</p>', truncator.words(3, '...', html=True))
 
+        re_tag_catastrophic_test = ('</a' + '\t' * 50000) + '//>'
+        truncator = text.Truncator(re_tag_catastrophic_test)
+        self.assertEqual(re_tag_catastrophic_test, truncator.words(500, html=True))
+
     def test_wrap(self):
         digits = '1234 67 9'
         self.assertEqual(text.wrap(digits, 100), '1234 67 9')
-- 
cgit v1.3