Mercurial > p > roundup > code
diff CHANGES.txt @ 5665:ab37c1705dbf maint-1.6
Fix fix XSS issue in wsgi and cgi when handing url not found/404. issue2551035
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Fri, 22 Mar 2019 18:16:11 -0400 |
| parents | 8e3df461d316 |
| children | b8a0421525b8 |
line wrap: on
line diff
--- a/CHANGES.txt Thu Mar 07 15:42:21 2019 +0100 +++ b/CHANGES.txt Fri Mar 22 18:16:11 2019 -0400 @@ -27,6 +27,10 @@ HTTP_X-REQUESTED-WITH to HTTP_X_REQUESTED_WITH. The last is correct. Also fix roundup-server to produce the latter form. (Patch by Cédric Krier, reviewed/applied John Rouillard.) +- issue2551035 - fix XSS issue in wsgi and cgi when handing url not + found/404. Reported by hannob at + https://github.com/python/bugs.python.org/issues/34, issue opened by + JulienPalard. 2018-07-13 1.6.0