Safety vulnerability ID: 62986
The information on this page was manually curated by our Cybersecurity Intelligence Team.
[This advisory has been limited. Please create a free account to view the full advisory.]
Latest version: 4.1.3
Webmention support for Django.
[This affected versions has been limited. Please create a free account to view the full affected versions.]
[This fixed versions has been limited. Please create a free account to view the full fixed versions.]
Breaking Changes
- Migrations are now included. If you are upgrading from any `1.x.x` version please follow [these instructions](https://github.com/beatonma/django-wm/wiki/Guide_Upgrading-to-2.0) to avoid data loss. Thanks to **GriceTurrble for providing these instructions.
- `requirements.txt` `celery` version updated to `5.2.2` due to [CVE-2021-23727](https://github.com/advisories/GHSA-q4xr-rc97-m4xx). If you are upgrading from `4.x` please follow the [upgrade instructions](https://docs.celeryproject.org/en/stable/history/whatsnew-5.0.html#upgrading-from-celery-4-x) provided by Celery.
Web API changes:
- `/get` endpoint:
- Removed `status` from JSON object - now uses HTTP response codes `200` if the target url was resolved correctly or `404` otherwise.
- Missing HCards are now serialized as null instead of an empty dict
json5
// https://example.org/webmention/get?url=my-article
// Old 1.x.x response
{
"status": 1,
"target_url": "https://example.org/my-article",
"mentions": [
{
"hcard": {},
"quote": null,
"source_url": "https://another-example.org/their-article",
"published": "2020-01-17T21:45:24.542Z"
}
]
}
json5
// https://example.org/webmention/get?url=my-article
// New 2.0.0 response with HTTP status 200 (or 404 if target_url does not exist)
{
"target_url": "https://example.org/my-article",
"mentions": [
{
"hcard": null,
"quote": null,
"source_url": "https://another-example.org/their-article",
"published": "2020-01-17T21:45:24.542Z"
}
]
}
New
- Use`{% webmention_endpoint %}` template tag to include your Webmentions endpoint in your Django template <head> to help other sites find it easily.
html
{% load webmention_endpoint %}
<!-- my-template.html -->
...
<head>
{% webmention_endpoint %} <!-- Rendered as <link rel="webmention" href="/webmention/" /> -->
</head>
...
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application