aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Handlers/Decorate.py
diff options
context:
space:
mode:
authormsapiro <>2006-06-23 20:03:32 +0000
committermsapiro <>2006-06-23 20:03:32 +0000
commit4dc70bbcc0856b2a27d0d6c0a2def51433712e36 (patch)
treec02801e8a577d58dcd2fde46f21164403d646716 /Mailman/Handlers/Decorate.py
parentb0a70c0f4069c8ee4196c42502445695a847ce9d (diff)
downloadmailman2-4dc70bbcc0856b2a27d0d6c0a2def51433712e36.tar.gz
mailman2-4dc70bbcc0856b2a27d0d6c0a2def51433712e36.tar.xz
mailman2-4dc70bbcc0856b2a27d0d6c0a2def51433712e36.zip
- Decorate.py Fixed bug 1507248 by ignoring header/footer characters
outside the character set of the list's language. - Utils.py Fixed a security hole which allowed a crafted URI to inject bogus apparent messages into the error log, possibly inducing an admin to visit a phishing site.
Diffstat (limited to '')
-rw-r--r--Mailman/Handlers/Decorate.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/Mailman/Handlers/Decorate.py b/Mailman/Handlers/Decorate.py
index 41db3950..d6b20391 100644
--- a/Mailman/Handlers/Decorate.py
+++ b/Mailman/Handlers/Decorate.py
@@ -95,8 +95,8 @@ def process(mlist, msg, msgdata):
# TK: Try to keep the message plain by converting the header/
# footer/oldpayload into unicode and encode with mcset/lcset.
# Try to decode qp/base64 also.
- uheader = unicode(header, lcset)
- ufooter = unicode(footer, lcset)
+ uheader = unicode(header, lcset, 'ignore')
+ ufooter = unicode(footer, lcset, 'ignore')
try:
oldpayload = unicode(msg.get_payload(decode=True), mcset)
frontsep = endsep = u''