diff options
author | Raymond Hettinger <python@rcn.com> | 2005-02-05 01:31:19 (GMT) |
---|---|---|
committer | Raymond Hettinger <python@rcn.com> | 2005-02-05 01:31:19 (GMT) |
commit | bab4143348f2185c1a9a778a281ef84d46307842 (patch) | |
tree | c7f031bf3bf89c1847067eefbbc7f485bff0aa60 | |
parent | ab630507deaf441e16803765f07841a3e230bdf2 (diff) | |
download | cpython-bab4143348f2185c1a9a778a281ef84d46307842.zip cpython-bab4143348f2185c1a9a778a281ef84d46307842.tar.gz cpython-bab4143348f2185c1a9a778a281ef84d46307842.tar.bz2 |
SF patch #1116583: NameError in cookielib domain check
-rw-r--r-- | Lib/cookielib.py | 7 | ||||
-rw-r--r-- | Misc/ACKS | 1 | ||||
-rw-r--r-- | Misc/NEWS | 2 |
3 files changed, 6 insertions, 4 deletions
diff --git a/Lib/cookielib.py b/Lib/cookielib.py index a125b21..86479f8 100644 --- a/Lib/cookielib.py +++ b/Lib/cookielib.py @@ -1134,11 +1134,10 @@ class DefaultCookiePolicy(CookiePolicy): # having to load lots of MSIE cookie files unless necessary. req_host, erhn = eff_request_host(request) if not req_host.startswith("."): - dotted_req_host = "."+req_host + req_host = "."+req_host if not erhn.startswith("."): - dotted_erhn = "."+erhn - if not (dotted_req_host.endswith(domain) or - dotted_erhn.endswith(domain)): + erhn = "."+erhn + if not (req_host.endswith(domain) or erhn.endswith(domain)): #debug(" request domain %s does not match cookie domain %s", # req_host, domain) return False @@ -399,6 +399,7 @@ Luke Mewburn Mike Meyer Steven Miale Trent Mick +Chad Miller Roman Milner Dom Mitchell Doug Moen @@ -51,6 +51,8 @@ Extension Modules Library ------- +- Fixed bug in a NameError bug in cookielib. Patch #1116583. + - Applied a security fix to SimpleXMLRPCserver (PSF-2005-001). This disables recursive traversal through instance attributes, which can be exploited in various ways. |