]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.15] gh-148954: Escape methodname in xmlrpc.client.dumps() to prevent XML injection...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 7 Jun 2026 07:52:40 +0000 (09:52 +0200)
committerGitHub <noreply@github.com>
Sun, 7 Jun 2026 07:52:40 +0000 (10:52 +0300)
commitd7aef33bd794c3b1d9bccfe3c923d460cd46b7c5
tree680ec057024ff699ac10687c49cd543524f929d3
parent96073736a40f80c419e7bc62fd6da86a3dc25277
[3.15] gh-148954: Escape methodname in xmlrpc.client.dumps() to prevent XML injection (GH-148968) (GH-151033)

(cherry picked from commit ab930175e7e909aaa3ec7e761bfdbb886677bebb)

Co-authored-by: Sanyam Kumat <124618873+sanyamk23@users.noreply.github.com>
Lib/test/test_xmlrpc.py
Lib/xmlrpc/client.py
Misc/NEWS.d/next/Library/2026-04-24-19-54-00.gh-issue-148954.v1.rst [new file with mode: 0644]