summaryrefslogtreecommitdiffstats
path: root/Python/dynload_os2.c
diff options
context:
space:
mode:
authorRoberto C. Sánchez <roberto@connexer.com>2019-09-14 17:26:38 (GMT)
committerMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>2019-09-14 17:26:38 (GMT)
commit4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e (patch)
treec456cb25511355df0886112af658bcfdc50e4ea1 /Python/dynload_os2.c
parent0d63669e52dd7e95708ec14e9e3e07d7dc9cd913 (diff)
downloadcpython-4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e.zip
cpython-4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e.tar.gz
cpython-4cbcd2f8c4e12b912e4d21fd892eedf7a3813d8e.tar.bz2
[2.7] bpo-34155: Dont parse domains containing @ (GH-13079) (GH-16006)
This change skips parsing of email addresses where domains include a "@" character, which can be maliciously used since the local part is returned as a complete address. (cherry picked from commit 8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9) Excludes changes to Lib/email/_header_value_parser.py, which did not exist in 2.7. Co-authored-by: jpic <jpic@users.noreply.github.com> https://bugs.python.org/issue34155
Diffstat (limited to 'Python/dynload_os2.c')
0 files changed, 0 insertions, 0 deletions