Commit Graph

3 Commits

Author SHA1 Message Date
Tim Graham 97e77b7bc1 [1.11.x] Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
This is a security fix.
2017-04-04 10:46:50 -04:00
Tim Graham 001ff50808 [1.11.x] Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
This is a security fix.
2017-04-04 10:46:50 -04:00
Tim Graham 839159b67e [1.11.x] Added stub release notes for security releases. 2017-04-04 10:46:48 -04:00