FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[3.6] bpo-34155: Dont parse domains containing @ (GH-13079) by miss-islington · Pull Request #14826 · python/cpython · GitHub

Repository navigation

[3.6] bpo-34155: Dont parse domains containing @ (GH-13079) - #14826

Merged
ned-deily merged 1 commit into
python:3.6from
miss-islington:backport-8cb65d1-3.6
Aug 9, 2019
Merged

ned-deily merged 1 commit into
python:3.6from
miss-islington:backport-8cb65d1-3.6

Conversation

miss-islington commented Jul 17, 2019 •
edited by bedevere-bot
Loading

Copy link
Copy Markdown
Contributor

Before:

    >>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
    (Address(display_name='', username='a', domain='malicious.org'),)

    >>> parseaddr('a@malicious.org@important.com')
    ('', 'a@malicious.org')

After:

    >>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
    (Address(display_name='', username='', domain=''),)

    >>> parseaddr('a@malicious.org@important.com')
    ('', 'a@')

https://bugs.python.org/issue34155
(cherry picked from commit 8cb65d1)

Co-authored-by: jpic jpic@users.noreply.github.com

https://bugs.python.org/issue34155

Before:

        >>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
        (Address(display_name='', username='a', domain='malicious.org'),)

        >>> parseaddr('a@malicious.org@important.com')
        ('', 'a@malicious.org')

    After:

        >>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
        (Address(display_name='', username='', domain=''),)

        >>> parseaddr('a@malicious.org@important.com')
        ('', 'a@')

https://bugs.python.org/issue34155
(cherry picked from commit 8cb65d1)

Co-authored-by: jpic <jpic@users.noreply.github.com>

Copy link
Copy Markdown
Contributor Author

@jpic: Status check is done, and it's a success ✅ .

ned-deily merged commit 13a1913 into python:3.6 Aug 9, 2019
miss-islington deleted the backport-8cb65d1-3.6 branch August 9, 2019 15:22
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type-security A security issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants


Back | FazBrowse Home | New Git URL