7df32f844efed33ca781a016017eab7050263b90 - external/github.com/python/cpython

commit	7df32f844efed33ca781a016017eab7050263b90	[log] [tgz]
author	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>	Wed May 27 23:17:52 2020
committer	GitHub <noreply@github.com>	Wed May 27 23:17:52 2020
tree	a86501bf0425c2017f7568e073ecf3f9f008daab
parent	763b193c96bf07a83a991985028e9ef272931b2d [diff]

bpo-39073: validate Address parts to disallow CRLF (GH-19007) (#19224)

Disallow CR or LF in email.headerregistry.Address arguments to guard against header injection attacks.
(cherry picked from commit 614f17211c5fc0e5b828be1d3320661d1038fe8f)

Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>

Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>

Lib/email/headerregistry.py[diff]
Lib/test/test_email/test_headerregistry.py[diff]
Misc/NEWS.d/next/Security/2020-03-15-01-28-36.bpo-39073.6Szd3i.rst[Added - diff]

3 files changed

tree: a86501bf0425c2017f7568e073ecf3f9f008daab