summaryrefslogtreecommitdiff
path: root/docs/releases/5.2.9.txt
diff options
context:
space:
mode:
authorvarunkasyap <varunkasyap@hotmail.com>2025-11-15 10:36:46 +0530
committerJacob Walls <jacobtylerwalls@gmail.com>2025-11-18 17:15:30 -0500
commite05f2a75695b5f5faa7682d4053db4776d4d6f93 (patch)
treef44d6a5c21dae127b516b0eb0d706b91778dfb70 /docs/releases/5.2.9.txt
parentb07298a73a8d444b3618aad8005055bee5ead8cb (diff)
Fixed #36733 -- Escaped attributes in Stylesheet.__str__().
Thanks Mustafa Barakat for the report, Baptiste Mispelon for the triage, and Jake Howard for the review.
Diffstat (limited to 'docs/releases/5.2.9.txt')
-rw-r--r--docs/releases/5.2.9.txt5
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/releases/5.2.9.txt b/docs/releases/5.2.9.txt
index 5698bdc206..0d726de640 100644
--- a/docs/releases/5.2.9.txt
+++ b/docs/releases/5.2.9.txt
@@ -9,4 +9,7 @@ Django 5.2.9 fixes several bugs in 5.2.8.
Bugfixes
========
-* ...
+* Fixed a bug in Django 5.2 where
+ ``django.utils.feedgenerator.Stylesheet.__str__()`` did not escape
+ the ``url``, ``mimetype``, and ``media`` attributes, potentially leading
+ to invalid XML markup (:ticket:`36733`).