mirror of
https://github.com/jazzband/django-downloadview.git
synced 2026-05-25 15:43:50 +00:00
This fixes #196, where it was observed that django_downloadview was vulnerable to reflected file download attacks with specially-named files, similar to CVE-2022-36359 in Django. This change adopts the same replacement rules as used in Django's fix in commit b3e4494d759202a3b6bf247fd34455bf13be5b80. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| api.py | ||
| io.py | ||
| packaging.py | ||
| response.py | ||
| sendfile.py | ||
| signature.py | ||
| views.py | ||