Startseite Erkunden Hilfe
Anmelden
CityApper
/
django
Mirror von https://github.com/django/django
2
0
Fork 0
Dateien Issues 0 Wiki
Struktur: 394517f078
Branches Tags
django
/
docs
/
releases
/
3.2.12.txt

3.2.12.txt 639 B
Verlauf Originalformat

1234567891011121314151617 
  1. ===========================
    2. 

  2. Django 3.2.12 release notes
    3. 

  3. ===========================
    4. 

  4. 

  5. *February 1, 2022*
    6. 

  6. 

  7. Django 3.2.12 fixes two security issues with severity "medium" in 3.2.11.
    8. 

  8. 

  9. CVE-2022-22818: Possible XSS via ``{% debug %}`` template tag
    10. 

  10. =============================================================
    11. 

  11. 

  12. The ``{% debug %}`` template tag didn't properly encode the current context,
    13. 

  13. posing an XSS attack vector.
    14. 

  14. 

  15. In order to avoid this vulnerability, ``{% debug %}`` no longer outputs an
    16. 

  16. information when the ``DEBUG`` setting is ``False``, and it ensures all context
    17. 

  17. variables are correctly escaped when the ``DEBUG`` setting is ``True``.
    18.