From ec710133c967b7e0183ed900883de15b941475dd Mon Sep 17 00:00:00 2001 From: tkikuchi <> Date: Thu, 25 Nov 2004 12:36:51 +0000 Subject: We have to escape other special characters like '=', so use urllib. --- Mailman/SecurityManager.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Mailman/SecurityManager.py b/Mailman/SecurityManager.py index b8707c1d..8a38863b 100644 --- a/Mailman/SecurityManager.py +++ b/Mailman/SecurityManager.py @@ -53,6 +53,7 @@ import time import Cookie import marshal import binascii +import urllib from types import StringType, TupleType from urlparse import urlparse @@ -103,7 +104,8 @@ class SecurityManager: # A bad system error raise TypeError, 'No user supplied for AuthUser context' secret = self.getMemberPassword(user) - key += 'user+%s' % Utils.ObscureEmail(user).replace('/','%2f') + userdata = urllib.quote(Utils.ObscureEmail(user), safe='') + key += 'user+%s' % userdata elif authcontext == mm_cfg.AuthListModerator: secret = self.mod_password key += 'moderator' -- cgit v1.2.3