diff options
| author | Jacob Kaplan-Moss <jacob@jacobian.org> | 2009-10-09 20:59:05 +0000 |
|---|---|---|
| committer | Jacob Kaplan-Moss <jacob@jacobian.org> | 2009-10-09 20:59:05 +0000 |
| commit | e3e992e18b368fcd56aabafc1b5bf80a6e11b495 (patch) | |
| tree | 6c18272091c6b33f241e0e5ee27cfec9ddde8df1 /django/__init__.py | |
| parent | 17173ac65af35683b8ca077a3a855eae1625ccd9 (diff) | |
[1.1.X] SECURITY ALERT: Corrected regular expressions for URL and email fields.
Certain email addresses/URLs could trigger a catastrophic backtracking
situation, causing 100% CPU and server overload. If deliberately triggered, this
could be the basis of a denial-of-service attack.
This security vulnerability was disclosed in public, so we're skipping our
normal security release process to get the fix out as soon as possible.
This is a security related update. A full announcement will follow.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11604 bcc190cf-cafb-0310-a4f2-bffc1f526a37
Diffstat (limited to 'django/__init__.py')
0 files changed, 0 insertions, 0 deletions