diff options
author | msapiro <> | 2006-06-23 20:03:32 +0000 |
---|---|---|
committer | msapiro <> | 2006-06-23 20:03:32 +0000 |
commit | 4dc70bbcc0856b2a27d0d6c0a2def51433712e36 (patch) | |
tree | c02801e8a577d58dcd2fde46f21164403d646716 /Mailman/Handlers/Decorate.py | |
parent | b0a70c0f4069c8ee4196c42502445695a847ce9d (diff) | |
download | mailman2-4dc70bbcc0856b2a27d0d6c0a2def51433712e36.tar.gz mailman2-4dc70bbcc0856b2a27d0d6c0a2def51433712e36.tar.xz mailman2-4dc70bbcc0856b2a27d0d6c0a2def51433712e36.zip |
- Decorate.py Fixed bug 1507248 by ignoring header/footer characters
outside the character set of the list's language.
- Utils.py Fixed a security hole which allowed a crafted URI to inject
bogus apparent messages into the error log, possibly inducing an admin to
visit a phishing site.
Diffstat (limited to '')
-rw-r--r-- | Mailman/Handlers/Decorate.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/Mailman/Handlers/Decorate.py b/Mailman/Handlers/Decorate.py index 41db3950..d6b20391 100644 --- a/Mailman/Handlers/Decorate.py +++ b/Mailman/Handlers/Decorate.py @@ -95,8 +95,8 @@ def process(mlist, msg, msgdata): # TK: Try to keep the message plain by converting the header/ # footer/oldpayload into unicode and encode with mcset/lcset. # Try to decode qp/base64 also. - uheader = unicode(header, lcset) - ufooter = unicode(footer, lcset) + uheader = unicode(header, lcset, 'ignore') + ufooter = unicode(footer, lcset, 'ignore') try: oldpayload = unicode(msg.get_payload(decode=True), mcset) frontsep = endsep = u'' |