git.ipfire.org Git - thirdparty/Python/cpython.git/commit

]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit

projects / thirdparty / Python / cpython.git / commit

author	Senthil Kumaran <senthil@uthcode.com>
	Sat, 30 Jul 2016 12:49:53 +0000 (05:49 -0700)
committer	Senthil Kumaran <senthil@uthcode.com>
	Sat, 30 Jul 2016 12:49:53 +0000 (05:49 -0700)
commit	75d7b615ba70fc5759d16dee95bbd8f0474d8a9c
tree	6fedc2530db2160bf68039a3bf28b4fefbb39743	tree \| snapshot
parent	a850ef698e55d07173051747e96207496c6f1bdb	commit \| diff

Prevent HTTPoxy attack (CVE-2016-1000110)

Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue reported and patch contributed by Rémi Rampin.

Doc/howto/urllib2.rst		diff \| blob \| blame \| history
Doc/library/urllib.rst		diff \| blob \| blame \| history
Doc/library/urllib2.rst		diff \| blob \| blame \| history
Lib/test/test_urllib.py		diff \| blob \| blame \| history
Lib/urllib.py		diff \| blob \| blame \| history
Misc/ACKS		diff \| blob \| blame \| history
Misc/NEWS		diff \| blob \| blame \| history

Mirror of https://github.com/python/cpython.git

RSS Atom