summaryrefslogtreecommitdiff
path: root/doc/build/unreleased/367.rst
blob: 6798e6e9800bd0598f3c9a56a0246dfdc73f0b87 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
.. change::
    :tags: bug, lexer
    :tickets: 367

    Fixed issue in lexer in the same category as that of :ticket:`366` where
    the regexp used to match an end tag didn't correctly organize for matching
    characters surrounded by whitespace, leading to high memory / interpreter
    hang if a closing tag incorrectly had a large amount of unterminated space
    in it. Credit to Sebastian Chnelik for locating the issue.

    As Mako templates inherently render and directly invoke arbitrary Python
    code from the template source, it is **never** appropriate to create
    templates that contain untrusted input.