cpython/Lib/test/test_email
Miss Islington (bot) 5dfb5e640e
[3.12] gh-121284: Fix email address header folding with parsed encoded-word (GH-122754) (#131404)
gh-121284: Fix email address header folding with parsed encoded-word (GH-122754)

Email generators using email.policy.default may convert an RFC 2047
encoded-word to unencoded form during header refolding. In a structured
header, this could allow 'specials' chars outside a quoted-string,
leading to invalid address headers and enabling spoofing. This change
ensures a parsed encoded-word that contains specials is kept as an
encoded-word while the header is refolded.

[Better fix from @bitdancer.]

---------
(cherry picked from commit 295b53df2a)

Co-authored-by: Mike Edmunds <medmunds@gmail.com>
Co-authored-by: R David Murray <rdmurray@bitdance.com>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
2025-03-18 15:35:32 -04:00
..
data [3.12] gh-106186: Don't report MultipartInvariantViolationDefect for valid multipart emails when parsing header only (GH-107016) (#107111) 2023-07-23 14:28:28 +02:00
__init__.py
__main__.py
test__encoded_words.py
test__header_value_parser.py [3.12] gh-121284: Fix email address header folding with parsed encoded-word (GH-122754) (#131404) 2025-03-18 15:35:32 -04:00
test_asian_codecs.py
test_contentmanager.py
test_defect_handling.py
test_email.py [3.12] gh-98188: Fix EmailMessage.get_payload to decode data when CTE value has extra text (GH-127547) (#128529) 2025-01-07 12:44:56 -05:00
test_generator.py [3.12] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122599) 2024-08-06 19:07:19 +02:00
test_headerregistry.py [3.12] gh-98188: Fix EmailMessage.get_payload to decode data when CTE value has extra text (GH-127547) (#128529) 2025-01-07 12:44:56 -05:00
test_inversion.py
test_message.py [3.12] gh-124452: Fix header mismatches when folding/unfolding with email message (GH-125919) (#126916) 2024-11-17 15:12:29 -05:00
test_parser.py
test_pickleable.py
test_policy.py [3.12] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122599) 2024-08-06 19:07:19 +02:00
test_utils.py [3.12] gh-113027: Fix test_variable_tzname in test_email (GH-113821) (GH-113831) 2024-01-12 12:00:17 +00:00
torture_test.py