mirror of
https://github.com/jazzband/django-downloadview.git
synced 2026-03-16 22:40:25 +00:00
This fixes #196, where it was observed that django_downloadview was vulnerable to reflected file download attacks with specially-named files, similar to CVE-2022-36359 in Django. This change adopts the same replacement rules as used in Django's fix in commit b3e4494d759202a3b6bf247fd34455bf13be5b80. |
||
|---|---|---|
| .. | ||
| apache | ||
| lighttpd | ||
| nginx | ||
| views | ||
| __init__.py | ||
| api.py | ||
| decorators.py | ||
| exceptions.py | ||
| files.py | ||
| io.py | ||
| middlewares.py | ||
| response.py | ||
| shortcuts.py | ||
| storage.py | ||
| test.py | ||
| utils.py | ||