... rnet Explorer requests with a Content-Disposition header have also been removed as they were found to have similar issues. Malformed redirect URLs from user input not correctly validated ¶ The validation for redirects did not correctly validate some malfo ... ss" URL. The security checks for these redirects (namely django.utils.http.is_safe_url() ) did not correctly validate some malformed URLs, such as http:\\\\\\djangoproject.com , which are accepted by some browsers with more liberal URL parsing. To remedy ... this, the validation in is_safe_url() has been tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.4.13 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redire ... ... rnet Explorer requests with a Content-Disposition header have also been removed as they were found to have similar issues. Malformed redirect URLs from user input not correctly validated ¶ The validation for redirects did not correctly validate some malfo ... ss" URL. The security checks for these redirects (namely django.utils.http.is_safe_url() ) did not correctly validate some malformed URLs, such as http:\\\\\\djangoproject.com , which are accepted by some browsers with more liberal URL parsing. To remedy ... this, the validation in is_safe_url() has been tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.5.8 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirec ... ... rnet Explorer requests with a Content-Disposition header have also been removed as they were found to have similar issues. Malformed redirect URLs from user input not correctly validated ¶ The validation for redirects did not correctly validate some malfo ... ss" URL. The security checks for these redirects (namely django.utils.http.is_safe_url() ) did not correctly validate some malformed URLs, such as http:\\\\\\djangoproject.com , which are accepted by some browsers with more liberal URL parsing. To remedy ... this, the validation in is_safe_url() has been tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.4.13 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redire ... ... rnet Explorer requests with a Content-Disposition header have also been removed as they were found to have similar issues. Malformed redirect URLs from user input not correctly validated ¶ The validation for redirects did not correctly validate some malfo ... ss" URL. The security checks for these redirects (namely django.utils.http.is_safe_url() ) did not correctly validate some malformed URLs, such as http:\\\\\\djangoproject.com , which are accepted by some browsers with more liberal URL parsing. To remedy ... this, the validation in is_safe_url() has been tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.5.8 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirec ... ... plorer requests with a Content-Disposition header have also been removed as they were found to have similar issues. Issue: Malformed redirect URLs from user input not correctly validated ¶ The validation for redirects did not correctly validate some malfo ... ss" URL. The security checks for these redirects (namely django.utils.http.is_safe_url() ) did not correctly validate some malformed URLs, such as http:\\\\\\djangoproject.com , which are accepted by some browsers with more liberal URL parsing. To remedy ... this, the validation in is_safe_url() has been tightened to be able to handle and correctly validate these malformed URLs. バグ修正 ¶ Made the year_lookup_bounds_for_datetime_field Oracle backend method Python 3 compatible ( #22551 ). Fixe ... ... plorer requests with a Content-Disposition header have also been removed as they were found to have similar issues. Issue: Malformed redirect URLs from user input not correctly validated ¶ The validation for redirects did not correctly validate some malfo ... ss" URL. The security checks for these redirects (namely django.utils.http.is_safe_url() ) did not correctly validate some malformed URLs, such as http:\\\\\\djangoproject.com , which are accepted by some browsers with more liberal URL parsing. To remedy ... this, the validation in is_safe_url() has been tightened to be able to handle and correctly validate these malformed URLs. バグ修正 ¶ Made the year_lookup_bounds_for_datetime_field Oracle backend method Python 3 compatible ( #22551 ). Fixe ... ... ge via malformed memcached keys ¶ In cases where a memcached backend does not perform key validation, passing malformed cache keys could re ... jQuery used by the admin from 3.3.1 to 3.5.1. 目次 Django 2.2.13 リリースノート CVE-2020-13254: Potential data leakage via malformed memcached keys CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget バグ修正 前のトピックへ Django 2.2.14 リリース ... クへ Django 2.2.12 リリースノート 関連キーワード memcached admin ForeignKeyRawIdWidget language security regression leakage malformed keys validation cache parameters encoded jQuery リリースノート June fixes issues Potential cases backend perform passing c ... ... ge via malformed memcached keys ¶ In cases where a memcached backend does not perform key validation, passing malformed cache keys could re ... jQuery used by the admin from 3.3.1 to 3.5.1. 目次 Django 2.2.13 リリースノート CVE-2020-13254: Potential data leakage via malformed memcached keys CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget バグ修正 前のトピックへ Django 2.2.14 リリース ... リリースノート 関連キーワード Django memcached key admin ForeignKeyRawIdWidget language security regression data leakage via malformed keys validation cache parameters encoded jQuery リリースノート June 関連するページ Django 3.0.7 リリースノート Django 1.11 ... ... ial data leakage via malformed memcached keys ¶ In cases where a memcached backend does not perform key validation, passing malformed cache keys could re ... jQuery used by the admin from 3.4.1 to 3.5.1. 目次 Django 3.0.7 リリースノート CVE-2020-13254: Potential data leakage via malformed memcached keys CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget バグ修正 前のトピックへ Django 3.0.8 リリースノ ... ースノート 関連キーワード Fixed regression values memcached admin ForeignKeyRawIdWidget queryset language バグ 修正 leakage malformed keys validation cache parameters were encoded QuerySet list crashed contained aggregation annotation used クイック検索 Las ... ... ial data leakage via malformed memcached keys ¶ In cases where a memcached backend does not perform key validation, passing malformed cache keys could re ... jQuery used by the admin from 3.4.1 to 3.5.1. 目次 Django 3.0.7 リリースノート CVE-2020-13254: Potential data leakage via malformed memcached keys CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget バグ修正 前のトピックへ Django 3.0.8 リリースノ ... ワード Django Fixed regression values memcached key admin ForeignKeyRawIdWidget queryset language バグ 修正 data leakage via malformed keys validation cache parameters 関連するページ Django 2.2.13 リリースノート Django 3.0.8 リリースノート Django 1.11.26 リ ... 2026年10月08日