diff options
Diffstat (limited to 'dev-python/django/files/django-2.2.21-fix-bpo43882.patch')
-rw-r--r-- | dev-python/django/files/django-2.2.21-fix-bpo43882.patch | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/dev-python/django/files/django-2.2.21-fix-bpo43882.patch b/dev-python/django/files/django-2.2.21-fix-bpo43882.patch deleted file mode 100644 index dc5d333be940..000000000000 --- a/dev-python/django/files/django-2.2.21-fix-bpo43882.patch +++ /dev/null @@ -1,25 +0,0 @@ -From bf04b74b155f91b47ca986543348bdf644f2ffb0 Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?Micha=C5=82=20G=C3=B3rny?= <mgorny@gentoo.org> -Date: Tue, 4 May 2021 13:10:50 +0200 -Subject: [PATCH] Reject URLs containing LF, CR or HT to workaround bpo43882 - ---- - django/core/validators.py | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/django/core/validators.py b/django/core/validators.py -index a385819510..bab034912a 100644 ---- a/django/core/validators.py -+++ b/django/core/validators.py -@@ -110,6 +110,8 @@ class URLValidator(RegexValidator): - try: - super().__call__(value) - except ValidationError as e: -+ if '\r' in value or '\n' in value or '\t' in value: -+ raise e - # Trivial case failed. Try for possible IDN domain - if value: - try: --- -2.31.1 - |