Debian Security Advisory DSA 2740-2 (python-django - cross-site scripting vulnerability)

Nick Brunn reported a possible cross-site scripting vulnerability in python-django, a high-level Python web development framework. The issafeurl utility function used to validate that a used URL is on the current host to avoid potentially dangerous redirects from maliciously-constructed...