cpython/Lib/email/test
R. David Murray 389af00371 Merged revisions 87873 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

........
  r87873 | r.david.murray | 2011-01-08 21:35:24 -0500 (Sat, 08 Jan 2011) | 12 lines

  #5871: protect against header injection attacks.

  This makes Header.encode throw a HeaderParseError if it winds up
  formatting a header such that a continuation line has no leading
  whitespace and looks like a header.  Since Header accepts values
  containing newlines and preserves them (and this is by design), without
  this fix any program that took user input (say, a subject in a web form)
  and passed it to the email package as a header was vulnerable to header
  injection attacks.  (As far as we know this has never been exploited.)

  Thanks to Jakub Wilk for reporting this vulnerability.
........
2011-01-09 02:48:04 +00:00
..
data Merged revisions 80795 via svnmerge from 2010-05-21 13:11:00 +00:00
__init__.py Copying the email package back, despite its failings. 2007-08-30 01:15:14 +00:00
test_email.py Merged revisions 87873 via svnmerge from 2011-01-09 02:48:04 +00:00
test_email_codecs.py "Port" the fix for issue 1974 from the trunk (2.7). Because Python 3.x does things much better, less changes are necessary. 2009-03-30 23:12:30 +00:00
test_email_torture.py #2621 rename test.test_support to test.support 2008-05-20 21:35:26 +00:00