mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-07 01:00:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

[1.7.x] Prevented reverse() from generating URLs pointing to other hosts.

Browse source 
This is a security fix. Disclosure following shortly.
This commit is contained in:
Florian Apolloner 2014-07-17 21:59:28 +02:00 • committed by Tim Graham
parent 1c00c38b4a
commit bf650a2ee7
6 changed files with 50 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
tests/urlpatterns_reverse/tests.py
View file

@ -151,6 +151,9 @@ test_data = (
('defaults', '/defaults_view2/3/', [], {'arg1': 3, 'arg2': 2}),
('defaults', NoReverseMatch, [], {'arg1': 3, 'arg2': 3}),
('defaults', NoReverseMatch, [], {'arg2': 1}),
# Security tests
('security', '/%2Fexample.com/security/', ['/example.com'], {}),
)