]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-39073: validate Address parts to disallow CRLF (#19007)
authorAshwin Ramaswami <aramaswamis@gmail.com>
Mon, 30 Mar 2020 00:38:41 +0000 (20:38 -0400)
committerGitHub <noreply@github.com>
Mon, 30 Mar 2020 00:38:41 +0000 (20:38 -0400)
commit614f17211c5fc0e5b828be1d3320661d1038fe8f
treeceb4506a92bc77dab1954a7caed397587d6b2c14
parent0003c2dc1d4cf5b122e73e83177fd274fa9a9913
bpo-39073: validate Address parts to disallow CRLF (#19007)

 Disallow CR or LF in email.headerregistry.Address arguments to guard against header injection attacks.
Lib/email/headerregistry.py
Lib/test/test_email/test_headerregistry.py
Misc/NEWS.d/next/Security/2020-03-15-01-28-36.bpo-39073.6Szd3i.rst [new file with mode: 0644]