diff options
| author | jpic <jpic@users.noreply.github.com> | 2019-07-17 21:54:25 (GMT) |
|---|---|---|
| committer | Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> | 2019-07-17 21:54:25 (GMT) |
| commit | 8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9 (patch) | |
| tree | 66906fde428f0af62b753d529cd28a87c9e7438c /Misc/NEWS.d/next/Security | |
| parent | 719a062bcb7b08a56e6576dcd75f4244e6053209 (diff) | |
| download | cpython-8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9.zip cpython-8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9.tar.gz cpython-8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9.tar.bz2 | |
bpo-34155: Dont parse domains containing @ (GH-13079)
Before:
>>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
(Address(display_name='', username='a', domain='malicious.org'),)
>>> parseaddr('a@malicious.org@important.com')
('', 'a@malicious.org')
After:
>>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
(Address(display_name='', username='', domain=''),)
>>> parseaddr('a@malicious.org@important.com')
('', 'a@')
https://bugs.python.org/issue34155
Diffstat (limited to 'Misc/NEWS.d/next/Security')
| -rw-r--r-- | Misc/NEWS.d/next/Security/2019-05-04-13-33-37.bpo-34155.MJll68.rst | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2019-05-04-13-33-37.bpo-34155.MJll68.rst b/Misc/NEWS.d/next/Security/2019-05-04-13-33-37.bpo-34155.MJll68.rst new file mode 100644 index 0000000..50292e2 --- /dev/null +++ b/Misc/NEWS.d/next/Security/2019-05-04-13-33-37.bpo-34155.MJll68.rst @@ -0,0 +1 @@ +Fix parsing of invalid email addresses with more than one ``@`` (e.g. a@b@c.com.) to not return the part before 2nd ``@`` as valid email address. Patch by maxking & jpic. |