mirror of
https://github.com/django/django.git
synced 2025-07-24 05:36:15 +00:00

The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs24fc935218
andada7a4aef
.
8 lines
254 B
Text
8 lines
254 B
Text
==========================
|
|
Django 1.9.4 release notes
|
|
==========================
|
|
|
|
*March 5, 2016*
|
|
|
|
Django 1.9.4 fixes a regression on Python 2 in the 1.9.3 security release
|
|
where ``utils.http.is_safe_url()`` crashes on bytestring URLs (:ticket:`26308`).
|