]> git.ipfire.org Git - thirdparty/tornado.git/commit
projects / thirdparty / tornado.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ecc40ae) | patch
auth: Correctly parse check_authentication response
authorBen Darnell <ben@bendarnell.com>
Thu, 21 May 2026 20:02:48 +0000 (16:02 -0400)
committerBen Darnell <ben@bendarnell.com>
Wed, 27 May 2026 16:07:30 +0000 (12:07 -0400)
commitb6e21463dfec0082e479b555362da9045b64df78
tree374b503039185bee21f66ed6f80af71c05f0f964tree | snapshot
parentecc40ae19fd30489435635f54841ca45613f59fccommit | diff
auth: Correctly parse check_authentication response

This previously used substring search, which is incorrect, although
unlikely to be a vulnerability because there are no free-form text
fields allowed in this response format.
tornado/auth.py diff | blob | blame | history
tornado/test/auth_test.py diff | blob | blame | history
Mirror of https://github.com/tornadoweb/tornado.git