2 Commits

Author	SHA1	Message	Date
Tim Graham	770427c289	[1.8.x] Made is_safe_url() reject URLs that start with control characters. ... This is a security fix; disclosure to follow shortly.	2015-03-18 19:23:21 -04:00
Tim Graham	5a8ef2a3cf	[1.8.x] Added stub release notes for security releases.	2015-03-18 19:23:21 -04:00