Guy Sartorelli b8d20dc9d5 [CVE-2024-32981] Disallow data:text/html in data attributes

2024-07-17 11:04:27 +12:00

..

Control

ENH Use class name instead of self

2024-06-18 09:37:39 +12:00

Core

FIX Allow double dots in path when not attempting directory traversal (#11219)

2024-05-06 13:15:26 +12:00

Dev

ENH Use class name instead of self

2024-06-18 09:37:39 +12:00

Forms

[CVE-2024-32981] Disallow data:text/html in data attributes

2024-07-17 11:04:27 +12:00

i18n

ENH Use class name instead of self

2024-06-18 09:37:39 +12:00

Logging

ENH Use class name instead of self

2024-06-18 09:37:39 +12:00

ORM

ENH Use class name instead of self

2024-06-18 09:37:39 +12:00

Security

ENH Use class name instead of self

2024-06-18 09:37:39 +12:00

View

FIX Don't strip <header> tag from HTMLValue (#11302)

2024-07-09 13:18:29 +12:00