Skip to content

Fix XSS in next_path url param #359

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Dec 1, 2022
Merged

Conversation

Gee19
Copy link
Contributor

@Gee19 Gee19 commented Nov 30, 2022

Not sure if this is the best place for this or directly in the get_next_path method.

@peppelinux
Copy link
Member

peppelinux commented Nov 30, 2022

unfortunately the tests doesn't pass

can you please check?

@peppelinux
Copy link
Member

ok, please change the version to 1.5.4 here
https://github.com/IdentityPython/djangosaml2/blob/master/setup.py#L30

we'll ahve a new release asap thanks to your contribution

@peppelinux peppelinux merged commit 5a0cfb2 into IdentityPython:master Dec 1, 2022
@Gee19
Copy link
Contributor Author

Gee19 commented Dec 6, 2022

@peppelinux can you create a pypi release if possible? I'd like to run some tests with these changes 🙏

@peppelinux
Copy link
Member

mmh.. it's very strange, the pypi github actions failed this time!

anyway, here it go
https://pypi.org/project/djangosaml2/1.5.4/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants