From bb493df55fe504a0dd4f743ad48837fd18eb9888 Mon Sep 17 00:00:00 2001
From: Mark Sapiro <mark@msapiro.net>
Date: Tue, 5 May 2020 08:08:54 -0700
Subject: Fixed options login content injection vulnerability.

---
 Mailman/Cgi/options.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'Mailman')

diff --git a/Mailman/Cgi/options.py b/Mailman/Cgi/options.py
index 641ec134..ee2293e2 100644
--- a/Mailman/Cgi/options.py
+++ b/Mailman/Cgi/options.py
@@ -173,7 +173,7 @@ def main():
     try:
         Utils.ValidateEmail(user)
     except Errors.EmailAddressError:
-        doc.addError(_('Illegal Email Address: %(safeuser)s'))
+        doc.addError(_('Illegal Email Address'))
         loginpage(mlist, doc, None, language)
         print doc.Format()
         return
-- 
cgit v1.2.3