diff options
| author | Mark Sapiro <mark@msapiro.net> | 2016-07-14 14:27:49 -0700 |
|---|---|---|
| committer | Mark Sapiro <mark@msapiro.net> | 2016-07-14 14:27:49 -0700 |
| commit | 6efea059931995de8713f35bccc1116905175cf2 (patch) | |
| tree | 6f7933394fc09ef5e495b24a558ca9c2a5f983f0 /Mailman/Cgi/listinfo.py | |
| parent | de6ffbe5a0ce37751247b071b75aa7c8e6605c58 (diff) | |
| download | mailman2-6efea059931995de8713f35bccc1116905175cf2.tar.gz mailman2-6efea059931995de8713f35bccc1116905175cf2.tar.xz mailman2-6efea059931995de8713f35bccc1116905175cf2.zip | |
Catch TypeError from certain defective crafted POST requests.
Diffstat (limited to 'Mailman/Cgi/listinfo.py')
| -rw-r--r-- | Mailman/Cgi/listinfo.py | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/Mailman/Cgi/listinfo.py b/Mailman/Cgi/listinfo.py index b07e2201..340f0fc1 100644 --- a/Mailman/Cgi/listinfo.py +++ b/Mailman/Cgi/listinfo.py @@ -58,7 +58,19 @@ def main(): # See if the user want to see this page in other language cgidata = cgi.FieldStorage() - language = cgidata.getvalue('language') + try: + language = cgidata.getvalue('language') + except TypeError: + # Someone crafted a POST with a bad Content-Type:. + doc = Document() + doc.set_language(mm_cfg.DEFAULT_SERVER_LANGUAGE) + doc.AddItem(Header(2, _("Error"))) + doc.AddItem(Bold(_('Invalid options to CGI script.'))) + # Send this with a 400 status. + print 'Status: 400 Bad Request' + print doc.Format() + return + if not Utils.IsLanguage(language): language = mlist.preferred_language i18n.set_language(language) |