Florian Apolloner 22bd174881 [3.1.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths. ...

Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.

Backport of d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6 from main.

2021-12-07 06:56:06 +01:00

..

__init__.py

Fixed #28593 -- Added a simplified URL routing syntax per DEP 0201.

2017-09-20 18:04:42 -04:00

converter_urls.py

Fixed #28593 -- Added a simplified URL routing syntax per DEP 0201.

2017-09-20 18:04:42 -04:00

converters.py

Fixed #28593 -- Added a simplified URL routing syntax per DEP 0201.

2017-09-20 18:04:42 -04:00

included_urls.py

Fixed #28766 -- Added ResolverMatch.route.

2018-12-06 18:05:40 -05:00

more_urls.py

Fixed #28766 -- Added ResolverMatch.route.

2018-12-06 18:05:40 -05:00

path_base64_urls.py

Fixed #29775 -- Fixed URL converters in a nested namespaced path.

2018-10-04 11:42:27 -04:00

path_dynamic_urls.py

Fixed #28593 -- Added a simplified URL routing syntax per DEP 0201.

2017-09-20 18:04:42 -04:00

path_same_name_urls.py

Fixed #30995 -- Allowed converter.to_url() to raise ValueError to indicate no match.

2020-01-09 14:41:41 +01:00

path_urls.py

Fixed #31061 -- Ignored positional args in django.urls.resolve() when all optional named parameters are missing.

2019-12-06 09:32:51 +01:00

test_resolvers.py

Fixed #29744 -- Fixed caching of URLResolver for a default URLconf.

2019-07-03 11:37:28 +02:00

tests.py

[3.1.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:56:06 +01:00

views.py

Removed default empty content argument from HttpResponse calls.

2019-02-09 16:27:32 -05:00