We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 047ece3 commit 9d13d8cCopy full SHA for 9d13d8c
docs/releases/2.2.27.txt
@@ -12,7 +12,7 @@ CVE-2022-22818: Possible XSS via ``{% debug %}`` template tag
12
The ``{% debug %}`` template tag didn't properly encode the current context,
13
posing an XSS attack vector.
14
15
-In order to avoid this vulnerability, ``{% debug %}`` no longer outputs an
+In order to avoid this vulnerability, ``{% debug %}`` no longer outputs
16
information when the ``DEBUG`` setting is ``False``, and it ensures all context
17
variables are correctly escaped when the ``DEBUG`` setting is ``True``.
18
0 commit comments