Results of 11 - 20 of about 73 for redirect (0.009 sec.)
- Django 1.4.6 release notes — Django 4.0.6 ドキュメント 8146
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
s. Mitigated possible XSS attack via user-supplied redirect URLs ¶ Django relies on user input in some cases ( ...
.login() , django.contrib.comments , and i18n ) to redirect the user to an "on success" URL. The security chec ...
ks for these redirects (namely django.utils.http.is_safe_url() ) didn't ...
developer relied on is_safe_url() to provide safe redirect targets and put such a URL into a link, they could ...
-
https://man.plustar.jp/django/releases/1.4.6.html
- [similar]
- Django 1.9.3 リリースノート — Django 4.0.6 ドキュメント 8104
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
nd several bugs in 1.9.2. CVE-2016-2512: Malicious redirect and possible XSS attack via user-supplied redirect ...
g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security chec ...
k for these redirects (namely django.utils.http.is_safe_url() ) conside ...
request's host is http://mysite.example.com , but redirecting to this URL sends the user to attacker.com . Al ...
-
https://man.plustar.jp/django/releases/1.9.3.html
- [similar]
- Django 1.6.11 release notes — Django 4.0.6 ドキュメント 7881
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
. Mitigated possible XSS attack via user-supplied redirect URLs ¶ Django relies on user input in some cases ( ...
g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security chec ...
ks for these redirects (namely django.utils.http.is_safe_url() ) accepte ...
ters such as %08//example.com as relative paths so redirection to an unsafe target isn't a problem either. How ...
-
https://man.plustar.jp/django/releases/1.6.11.html
- [similar]
- Django 1.7.3 release notes — Django 4.0.6 ドキュメント 7825
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
t. Mitigated possible XSS attack via user-supplied redirect URLs ¶ Django relies on user input in some cases ( ...
g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security chec ...
ks for these redirects (namely django.utils.http.is_safe_url() ) didn't ...
developer relied on is_safe_url() to provide safe redirect targets and put such a URL into a link, they could ...
-
https://man.plustar.jp/django/releases/1.7.3.html
- [similar]
- Django 1.7.7 release notes — Django 4.0.6 ドキュメント 7825
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
. Mitigated possible XSS attack via user-supplied redirect URLs ¶ Django relies on user input in some cases ( ...
g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security chec ...
ks for these redirects (namely django.utils.http.is_safe_url() ) accepte ...
ters such as %08//example.com as relative paths so redirection to an unsafe target isn't a problem either. How ...
-
https://man.plustar.jp/django/releases/1.7.7.html
- [similar]
- Django 1.5.2 release notes — Django 4.0.6 ドキュメント 7741
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
5. Mitigated possible XSS attack via user-supplied redirect URLs ¶ Django relies on user input in some cases ( ...
.login() , django.contrib.comments , and i18n ) to redirect the user to an "on success" URL. The security chec ...
ks for these redirects (namely django.utils.http.is_safe_url() ) didn't ...
developer relied on is_safe_url() to provide safe redirect targets and put such a URL into a link, they could ...
-
https://man.plustar.jp/django/releases/1.5.2.html
- [similar]
- Django 1.4.18 release notes — Django 4.0.6 ドキュメント 7601
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
t. Mitigated possible XSS attack via user-supplied redirect URLs ¶ Django relies on user input in some cases ( ...
g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security chec ...
ks for these redirects (namely django.utils.http.is_safe_url() ) didn't ...
developer relied on is_safe_url() to provide safe redirect targets and put such a URL into a link, they could ...
-
https://man.plustar.jp/django/releases/1.4.18.html
- [similar]
- mixinを編集する — Django 4.0.6 ドキュメント 7559
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
default. get_success_url () ¶ Determine the URL to redirect to when the form is successfully validated. Return ...
s success_url by default. form_valid ( form ) ¶ Redirects to get_success_url() . form_invalid ( form ) ¶ Re ...
ple, you could use success_url="/polls/{slug}/" to redirect to a URL composed out of the slug field on a model ...
args() . get_success_url () ¶ Determine the URL to redirect to when the form is successfully validated. Return ...
-
https://man.plustar.jp/django/ref/class-based-views/mixins-editing.html
- [similar]
- Django 1.1 リリースノート — Django 4.0.6 ドキュメント 7322
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
ary to what was documented and expected. Permanent redirects and the redirect_to() generic view ¶ Django 1.1 a ...
manent argument to the django.views.generic.simple.redirect_to() view. This is technically backwards-incompati ...
ble if you were using the redirect_to view with a format-string key called 'permanent ...
ient: The test Client now can automatically follow redirects with the follow argument to Client.get() and Clie ...
-
https://man.plustar.jp/django/releases/1.1.html
- [similar]
- セキュリティ上の問題のアーカイブ — Django 4.0.6 ドキュメント 7280
- " + tagname + " "); } }); $("div.highlight\\-html\\+django span.nf").each(function(i, elem) { va
...
1.10 (パッチ) April 4, 2017 - CVE-2017-7234 ¶ Open redirect vulnerability in django.views.static.serve() . Ful ...
1.8 (パッチ) April 4, 2017 - CVE-2017-7233 ¶ Open redirect and possible XSS attack via user-supplied numeric ...
(patch) March 1, 2016 - CVE-2016-2512 ¶ Malicious redirect and possible XSS attack via user-supplied redirect ...
¶ Mitigated possible XSS attack via user-supplied redirect URLs. Full description 影響を受けるバージョン ¶ Dj ...
-
https://man.plustar.jp/django/releases/security.html
- [similar]