]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 37fe316) | patch
[3.5] closes bpo-38576: Disallow control characters in hostnames in http.client....
authorTapas Kundu <39723251+tapakund@users.noreply.github.com>
Sat, 20 Jun 2020 06:43:50 +0000 (12:13 +0530)
committerGitHub <noreply@github.com>
Sat, 20 Jun 2020 06:43:50 +0000 (23:43 -0700)
commit09d8172837b6985c4ad90ee025f6b5a554a9f0ac
treeb5a619ae3cc0060123aba6b08f6b3aaad62bd5b9tree | snapshot
parent37fe316479e0b6906a74b0c0a5e495c55037fdfdcommit | diff
[3.5] closes bpo-38576: Disallow control characters in hostnames in http.client. (#19300)

Add host validation for control characters for more
CVE-2019-18348 protection.
(cherry picked from commit 83fc70159b24)
Lib/http/client.py diff | blob | blame | history
Lib/test/test_httplib.py diff | blob | blame | history
Lib/test/test_urllib.py diff | blob | blame | history
Misc/NEWS.d/next/Security/2020-03-14-14-57-44.bpo-38576.OowwQn.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git