---
title: "Note di rilascio di Django 1.11.18"
version: 4.1
locale: it
source: https://docs.djangoproject.com/it/4.1/releases/1.11.18/
canonical: https://djangodocs.dev/it/4.1/releases/1.11.18/
---
# Note di rilascio di Django 1.11.18

*4 Gennaio 2019*

Django 1.11.18 risolve un problema di sicurezza in 1.11.17.

## CVE-2019-3498: Content spoofing possibility in the default 404 page

An attacker could craft a malicious URL that could make spoofed content appear
on the default page generated by the `django.views.defaults.page_not_found()`
view.

The URL path is no longer displayed in the default 404 template and the
`request_path` context variable is now quoted to fix the issue for custom
templates that use the path.