mirror of
https://github.com/django/django.git
synced 2025-08-30 15:27:40 +00:00
Fixed an infinite loop possibility in strip_tags().
This is a security fix; disclosure to follow shortly.
This commit is contained in:
parent
9ddfe9b301
commit
1c83fc88d6
4 changed files with 41 additions and 2 deletions
|
@ -82,6 +82,9 @@ class TestUtilsHtml(TestCase):
|
|||
('a<p a >b</p>c', 'abc'),
|
||||
('d<a:b c:d>e</p>f', 'def'),
|
||||
('<strong>foo</strong><a href="http://example.com">bar</a>', 'foobar'),
|
||||
# caused infinite loop on Pythons not patched with
|
||||
# http://bugs.python.org/issue20288
|
||||
('&gotcha&#;<>', '&gotcha&#;<>'),
|
||||
)
|
||||
for value, output in items:
|
||||
self.check_output(f, value, output)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue