---
title: "Note di rilascio di Django 1.10.8"
version: 6.1
locale: it
source: https://docs.djangoproject.com/it/6.1/releases/1.10.8/
canonical: https://djangodocs.dev/it/6.1/releases/1.10.8/
---
# Note di rilascio di Django 1.10.8

*5 Settembre 2017*

Django 1.10.8 risolve un problema di sicurezza in 1.10.7.

## CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page

In older versions, HTML autoescaping was disabled in a portion of the template
for the technical 500 debug page. Given the right circumstances, this allowed
a cross-site scripting attack. This vulnerability shouldn’t affect most
production sites since you shouldn’t run with `DEBUG = True` (which makes
this page accessible) in your production settings.