3 Commits

Author	SHA1	Message	Date
Claude Paroz	552f03869e	Added safety to URL decoding in is_safe_url() on Python 2 ... The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.	2016-03-04 23:33:35 +01:00
Claude Paroz	ada7a4aefb	Fixed #26308 -- Prevented crash with binary URLs in is_safe_url() ... This fixes a regression introduced by c5544d28923. Thanks John Eskew for the reporti and Tim Graham for the review.	2016-03-04 21:14:14 +01:00
Tim Graham	2e895d2870	Added stub release notes for 1.9.4.	2016-03-01 12:39:01 -05:00