diff options
author | Roberto C. Sánchez <roberto@connexer.com> | 2019-09-14 17:26:38 (GMT) |
---|---|---|
committer | Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> | 2019-09-14 17:26:38 (GMT) |
commit | 4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e (patch) | |
tree | c456cb25511355df0886112af658bcfdc50e4ea1 /Python/dynload_os2.c | |
parent | 0d63669e52dd7e95708ec14e9e3e07d7dc9cd913 (diff) | |
download | cpython-4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e.zip cpython-4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e.tar.gz cpython-4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e.tar.bz2 |
[2.7] bpo-34155: Dont parse domains containing @ (GH-13079) (GH-16006)
This change skips parsing of email addresses where domains include a "@" character, which can be maliciously used since the local part is returned as a complete address.
(cherry picked from commit 8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9)
Excludes changes to Lib/email/_header_value_parser.py, which did not
exist in 2.7.
Co-authored-by: jpic <jpic@users.noreply.github.com>
https://bugs.python.org/issue34155
Diffstat (limited to 'Python/dynload_os2.c')
0 files changed, 0 insertions, 0 deletions