diff options
| author | Petr Viktorin <encukou@gmail.com> | 2025-04-03 16:27:33 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-04-03 16:27:33 (GMT) |
| commit | 9a31386eec8715ab5842bbe8cfcc0fb5cf3631af (patch) | |
| tree | 48562433bedf9828f8132bdfa54067255b381fc1 /Python/pythonrun.c | |
| parent | ff4e5c25666f63544071a6b075ae8b25c98b7a32 (diff) | |
| download | cpython-9a31386eec8715ab5842bbe8cfcc0fb5cf3631af.zip cpython-9a31386eec8715ab5842bbe8cfcc0fb5cf3631af.tar.gz cpython-9a31386eec8715ab5842bbe8cfcc0fb5cf3631af.tar.bz2 | |
[3.9] gh-121284: Fix email address header folding with parsed encoded-word (GH-122754) (GH-131412)
Email generators using email.policy.default may convert an RFC 2047
encoded-word to unencoded form during header refolding. In a structured
header, this could allow 'specials' chars outside a quoted-string,
leading to invalid address headers and enabling spoofing. This change
ensures a parsed encoded-word that contains specials is kept as an
encoded-word while the header is refolded.
[Better fix from @bitdancer.]
(cherry picked from commit 295b53df2aa18deb625a7da41f7e4babfe6ef34b)
Co-authored-by: Mike Edmunds <medmunds@gmail.com>
Co-authored-by: R David Murray <rdmurray@bitdance.com>
Diffstat (limited to 'Python/pythonrun.c')
0 files changed, 0 insertions, 0 deletions