diff options
author | Senthil Kumaran <senthil@uthcode.com> | 2016-07-31 06:51:13 (GMT) |
---|---|---|
committer | Senthil Kumaran <senthil@uthcode.com> | 2016-07-31 06:51:13 (GMT) |
commit | cde03fa0381fcb7f7d3ba0dff4e784eade1f3031 (patch) | |
tree | e5958851d32ee2b1d8296c33324fd80d6177e8df /Misc/ACKS | |
parent | bf5868d2c5a9bc742b69172820a34ea88bfe2591 (diff) | |
parent | 7bfbd1d3c56b2a5281edeb7a8e21598618b7c1a3 (diff) | |
download | cpython-cde03fa0381fcb7f7d3ba0dff4e784eade1f3031.zip cpython-cde03fa0381fcb7f7d3ba0dff4e784eade1f3031.tar.gz cpython-cde03fa0381fcb7f7d3ba0dff4e784eade1f3031.tar.bz2 |
[merge from 3.5] - Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.
Issue #27568 Reported and patch contributed by Rémi Rampin.
Diffstat (limited to 'Misc/ACKS')
-rw-r--r-- | Misc/ACKS | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -1204,6 +1204,7 @@ Shorya Raj Jeff Ramnani Varpu Rantala Brodie Rao +Rémi Rampin Senko Rasic Antti Rasinen Nikolaus Rath |