Ana Guerrero
59b1c8c2ac
- update to 1.3.12:
* Fixed issue in :class:`.TemplateLookup` where a URI with
backslash path separators (e.g. ``\..\secret.txt``) could
bypass the directory traversal check on Windows, allowing
reads of arbitrary files outside of the template directory.
Backslash characters in URIs are now normalized to forward
slashes before path resolution.
OBS-URL: https://build.opensuse.org/request/show/1350583
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Mako?expand=0&rev=63