Skip to content

Commit

Permalink
release version 3.1.4
Browse files Browse the repository at this point in the history
  • Loading branch information
davidism committed May 5, 2024
1 parent 0668239 commit dd4a8b5
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
6 changes: 3 additions & 3 deletions CHANGES.rst
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,13 @@
Version 3.1.4
-------------

Unreleased
Released 2024-05-05

- The ``xmlattr`` filter does not allow keys with ``/`` solidus, ``>``
greater-than sign, or ``=`` equals sign, in addition to disallowing spaces.
Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
GHSA-h75v-3vvj-5mfj
:ghsa:`h75v-3vvj-5mfj`


Version 3.1.3
Expand All @@ -19,7 +19,7 @@ Released 2024-01-10

- Fix compiler error when checking if required blocks in parent templates are
empty. :pr:`1858`
- ``xmlattr`` filter does not allow keys with spaces. GHSA-h5c8-rqwp-cp95
- ``xmlattr`` filter does not allow keys with spaces. :ghsa:`h5c8-rqwp-cp95`
- Make error messages stemming from invalid nesting of ``{% trans %}`` blocks
more helpful. :pr:`1918`

Expand Down
2 changes: 1 addition & 1 deletion src/jinja2/__init__.py
Original file line number Diff line number Diff line change
Expand Up @@ -35,4 +35,4 @@
from .utils import pass_eval_context as pass_eval_context
from .utils import select_autoescape as select_autoescape

__version__ = "3.1.4.dev"
__version__ = "3.1.4"

0 comments on commit dd4a8b5

Please sign in to comment.