django1

Author	SHA1	Message	Date
Claude Paroz	552f03869e	Added safety to URL decoding in is_safe_url() on Python 2 The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs `24fc935218` and `ada7a4aef`.	2016-03-04 23:33:35 +01:00
Claude Paroz	ada7a4aefb	Fixed #26308 -- Prevented crash with binary URLs in is_safe_url() This fixes a regression introduced by `c5544d2892`. Thanks John Eskew for the reporti and Tim Graham for the review.	2016-03-04 21:14:14 +01:00
Tim Graham	2e895d2870	Added stub release notes for 1.9.4.	2016-03-01 12:39:01 -05:00