... t.textContent is now used to prevent execution of the data. The debug view also used innerHTML . Although a security issue wasn't identified there, out of an abundance of caution it's also updated to use textContent . バグ修正 ¶ Fixed missing varchar ... nt innerHTML textContent used also リリースノート July fixes Unsafe usage JavaScript prevent execution debug view Although wasn identified there クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... and tabs. If you used values with newlines in HTTP response, you could suffer from header injection attacks. Django itself wasn't vulnerable because HttpResponse prohibits newlines in HTTP headers. Moreover, the URLField form field which uses URLVali ... リリースノート fixes security Header since accepted input didn prohibit used values response suffer header attacks itself wasn vulnerable クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... and tabs. If you used values with newlines in HTTP response, you could suffer from header injection attacks. Django itself wasn't vulnerable because HttpResponse prohibits newlines in HTTP headers. Moreover, the URLField form field which uses URLVali ... リリースノート fixes security Header since accepted input didn prohibit used values response suffer header attacks itself wasn vulnerable クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... and tabs. If you used values with newlines in HTTP response, you could suffer from header injection attacks. Django itself wasn't vulnerable because HttpResponse prohibits newlines in HTTP headers. Moreover, the URLField form field which uses URLVali ... リリースノート fixes security Header since accepted input didn prohibit used values response suffer header attacks itself wasn vulnerable クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... t.textContent is now used to prevent execution of the data. The debug view also used innerHTML . Although a security issue wasn't identified there, out of an abundance of caution it's also updated to use textContent . バグ修正 ¶ Fixed missing varchar ... ... and tabs. If you used values with newlines in HTTP response, you could suffer from header injection attacks. Django itself wasn't vulnerable because HttpResponse prohibits newlines in HTTP headers. Moreover, the URLField form field which uses URLVali ... ... and tabs. If you used values with newlines in HTTP response, you could suffer from header injection attacks. Django itself wasn't vulnerable because HttpResponse prohibits newlines in HTTP headers. Moreover, the URLField form field which uses URLVali ... ... Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout() view (provided it wasn't decorated with login_required() as done in the admin). This could allow an attacker to easily create many new session re ... ... Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout() view (provided it wasn't decorated with login_required() as done in the admin). This could allow an attacker to easily create many new session re ... ... t.textContent is now used to prevent execution of the data. The debug view also used innerHTML . Although a security issue wasn't identified there, out of an abundance of caution it's also updated to use textContent . バグ修正 ¶ Fixed missing varchar ... 2026年10月08日