diff options
| author | varunkasyap <varunkasyap@hotmail.com> | 2025-11-15 10:36:46 +0530 |
|---|---|---|
| committer | Jacob Walls <jacobtylerwalls@gmail.com> | 2025-11-18 17:17:28 -0500 |
| commit | 001c2f546b4053acb04f16d6b704f7b4fbca1c45 (patch) | |
| tree | 98389cc7e89064c7a7b8635c6c1f3bfb67b85af8 /docs | |
| parent | edec3e59a33ae4f456194c29630fd601213eee2f (diff) | |
[5.2.x] Fixed #36733 -- Escaped attributes in Stylesheet.__str__().
Thanks Mustafa Barakat for the report, Baptiste Mispelon for
the triage, and Jake Howard for the review.
Backport of e05f2a75695b5f5faa7682d4053db4776d4d6f93 from main.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/5.2.9.txt | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/releases/5.2.9.txt b/docs/releases/5.2.9.txt index 5698bdc206..0d726de640 100644 --- a/docs/releases/5.2.9.txt +++ b/docs/releases/5.2.9.txt @@ -9,4 +9,7 @@ Django 5.2.9 fixes several bugs in 5.2.8. Bugfixes ======== -* ... +* Fixed a bug in Django 5.2 where + ``django.utils.feedgenerator.Stylesheet.__str__()`` did not escape + the ``url``, ``mimetype``, and ``media`` attributes, potentially leading + to invalid XML markup (:ticket:`36733`). |