diff options
| author | David Lord <davidism@gmail.com> | 2023-04-07 14:03:16 -0700 |
|---|---|---|
| committer | David Lord <davidism@gmail.com> | 2023-04-10 13:16:44 -0700 |
| commit | ff3df42fed1041d72bc57eb15500d19bcdb170a2 (patch) | |
| tree | 3b00d464595c920897458dbdb92b2a8a782c8bf4 /CHANGES.rst | |
| parent | 6d4de9e0ff5cfa12741e409db5bca190152ad8b8 (diff) | |
| download | werkzeug-ff3df42fed1041d72bc57eb15500d19bcdb170a2.tar.gz | |
restrict multipart charsets
Diffstat (limited to 'CHANGES.rst')
| -rw-r--r-- | CHANGES.rst | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/CHANGES.rst b/CHANGES.rst index 1eb3b11a..4888a3b0 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -109,6 +109,8 @@ Unreleased - The ``Map`` ``charset`` parameter is deprecated. The ``Request.url_charset`` property is deprecated. Percent encoding in URLs must always represent UTF-8 bytes. Invalid bytes are left percent encoded rather than replaced. :pr:`2602` +- Header values that have charset information only allow ASCII, UTF-8, and ISO-8859-1. + :pr:`2614, 2640` Version 2.2.3 |