]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.14] gh-148954: Escape methodname in xmlrpc.client.dumps() to prevent XML injection...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 7 Jun 2026 07:52:54 +0000 (09:52 +0200)
committerGitHub <noreply@github.com>
Sun, 7 Jun 2026 07:52:54 +0000 (10:52 +0300)
commitc2f47af48fc19f9fd8e8a24b6d4b11ec8b85dfb1
tree23abc97c680650e736990a97cb5e7e030efaba96
parent3d45ab2520dcc1c352d0c2bbb0e1134e5d212645
[3.14] gh-148954: Escape methodname in xmlrpc.client.dumps() to prevent XML injection (GH-148968) (GH-151034)

(cherry picked from commit ab930175e7e909aaa3ec7e761bfdbb886677bebb)

Co-authored-by: Sanyam Kumat <124618873+sanyamk23@users.noreply.github.com>
Lib/test/test_xmlrpc.py
Lib/xmlrpc/client.py
Misc/NEWS.d/next/Library/2026-04-24-19-54-00.gh-issue-148954.v1.rst [new file with mode: 0644]