]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c8e1076) | patch
bpo-39073: validate Address parts to disallow CRLF (GH-19007)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 27 May 2020 13:38:14 +0000 (06:38 -0700)
committerGitHub <noreply@github.com>
Wed, 27 May 2020 13:38:14 +0000 (06:38 -0700)
commita93bf82980d7c02217a088bafa193f32a4d13abb
tree147f5743862b978026dcd0a40112c593937d74dbtree | snapshot
parentc8e107607d8a2c9a149cf6a706d508a556729892commit | diff
bpo-39073: validate Address parts to disallow CRLF (GH-19007)

 Disallow CR or LF in email.headerregistry.Address arguments to guard against header injection attacks.
(cherry picked from commit 614f17211c5fc0e5b828be1d3320661d1038fe8f)

Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>
Lib/email/headerregistry.py diff | blob | blame | history
Lib/test/test_email/test_headerregistry.py diff | blob | blame | history
Misc/NEWS.d/next/Security/2020-03-15-01-28-36.bpo-39073.6Szd3i.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git