Re: [Django] #35172: intcomma adds leading comma for string-based 3-digit number with at least 1 decimal place. (was: intcomma patch in CVE-2024-24680 causing leading comma when provided string-based 3-digit number with at least 1 decimal place)

3 views
Skip to first unread message

Django

unread,
Feb 6, 2024, 11:38:43 PMFeb 6
to django-...@googlegroups.com
#35172: intcomma adds leading comma for string-based 3-digit number with at least 1
decimal place.
-------------------------------------+-------------------------------------
Reporter: Warwick Brown | Owner: nobody
Type: Bug | Status: new
Component: contrib.humanize | Version: 3.2
Severity: Release blocker | Resolution:
Keywords: humanize intcomma | Triage Stage: Accepted
comma decimal places |
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Mariusz Felisiak):

* cc: Natalia Bidart, Adam Johnson (added)
* summary:
intcomma patch in CVE-2024-24680 causing leading comma when provided
string-based 3-digit number with at least 1 decimal place
=>
intcomma adds leading comma for string-based 3-digit number with at
least 1 decimal place.
* severity: Normal => Release blocker
* version: 4.2 => 3.2
* stage: Unreviewed => Accepted

Comment:

Great catch! Thanks for the report.

Regression in 55519d6cf8998fe4c8f5c8abffc2b10a7c3d14e9.
--
Ticket URL: <https://code.djangoproject.com/ticket/35172#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Reply all
Reply to author
Forward
0 new messages