Bump jinja2 from 2.11.2 to 2.11.3
Bumps jinja2 from 2.11.2 to 2.11.3.
Release notes
Sourced from jinja2's releases.
2.11.3
This contains a fix for a speed issue with the
urlize
filter.urlize
is likely to be called on untrusted user input. For certain inputs some of the regular expressions used to parse the text could take a very long time due to backtracking. As part of the fix, the email matching became slightly stricter. The various speedups apply tourlize
in general, not just the specific input cases.
Changelog
Sourced from jinja2's changelog.
Version 2.11.3
Released 2021-01-31
- Improve the speed of the
urlize
filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.🇵🇷 1343
Commits
-
cf21539
release version 2.11.3 -
15ef8f0
Merge pull request #1343 from pallets/urlize-speedup -
ef658dc
speed up urlize matching -
eeca0fe
Merge pull request #1207 from mhansen/patch-1 -
2dd7691
Merge pull request #1209 from mhansen/patch-3 -
4892940
do_dictsort: update example ready to copy/paste -
7db7d33
api.rst: bugfix in docs, import PackageLoader -
9ec465b
fix changelog header - See full diff in compare view