8000 gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) by tdwyer · Pull Request #105127 · python/cpython · GitHub
[go: up one dir, main page]
Skip to content

gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) #105127

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 9 commits into from
Jul 10, 2023
Merged

gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) #105127

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
81098ed
gh-102988: Detect email address parsing errors and return empty tuple…
tdwyer May 31, 2023
ecbb31c
r-prefix strs with \ in the tests
gpshead May 31, 2023
d8d2831
reword getaddresses docstring
gpshead May 31, 2023
b44a0b7
Update comment for getaddresses() and fix broken email test
tdwyer Jun 7, 2023
40002d9
Add NEWS
tdwyer Jun 14, 2023
86ffb57
Merge branch 'main' into fix_issues102988
gpshead Jun 21, 2023
302ee76
Fix NEWS entry. It was not a Module its Class email._parseaddr.Addres…
tdwyer Jun 21, 2023
48d9f58
Add email.utils docs, narrow the docstring.
gpshead Jul 10, 2023
f96a3ff
Add versionchanged to parseaddr, add What's New.
gpshead Jul 10, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Add versionchanged to parseaddr, add What's New.
  • Loading branch information
@gpshead
gpshead committed Jul 10, 2023
commit f96a3ff86a6d1ebadc2ee30096bd2df2deebc6bc
5 changes: 5 additions & 0 deletions Doc/library/email.utils.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,11 @@ of the new API.
*email address* parts. Returns a tuple of that information, unless the parse
fails, in which case a 2-tuple of ``('', '')`` is returned.

.. versionchanged:: 3.12
For security reasons, addresses that were ambiguous and could parse into
multiple different addresses now cause ``('', '')`` to be returned
instead of only one of the *potential* addresses.


.. function:: formataddr(pair, charset='utf-8')

Expand Down
8 changes: 8 additions & 0 deletions Doc/whatsnew/3.12.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -564,6 +564,14 @@ dis
:data:`~dis.hasarg` collection instead.
(Contributed by Irit Katriel in :gh:`94216`.)

email
-----

* :func:`email.utils.getaddresses` and :func:`email.utils.parseaddr` now return
``('', '')`` 2-tuples in more situations where invalid email addresses are
encountered instead of potentially inaccurate values.
(Contributed by Thomas Dwyer for :gh:`102988` to ameliorate CVE-2023-27043.)

fractions
---------

Expand Down
0