8000 gh-121284: Fix email address header folding with parsed encoded-word by medmunds · Pull Request #122754 · python/cpython · GitHub
[go: up one dir, main page]
Skip to content

gh-121284: Fix email address header folding with parsed encoded-word #122754

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Mar 18, 2025
Merged

gh-121284: Fix email address header folding with parsed encoded-word #122754

Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
c540c9f
gh-121284: Fix email address header folding with parsed encoded-word
medmunds Aug 6, 2024
9c05613
Merge branch 'main' into fix-issue-121284
medmunds Oct 21, 2024
a8d23d2
Merge branch 'main' into fix-issue-121284
medmunds Jan 18, 2025
45159cd
Be more specific in news
medmunds Jan 18, 2025
e63ec20
Merge branch 'main' into fix-issue-121284
medmunds Mar 5, 2025
c249511
squash! gh-121284: Fix email address header folding with parsed encod…
medmunds Mar 5, 2025
1da1d57
Merge branch 'main' into fix-issue-121284
encukou Mar 17, 2025
ede0ce8
Merge branch 'main' into fix-issue-121284
bitdancer Mar 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Be more specific in news
  • Loading branch information
@medmunds
medmunds committed Jan 18, 2025
commit 45159cd073c5ec45edd374842a06aa3cdae25aba
11 changes: 7 additions & 4 deletions Misc/NEWS.d/next/Security/2024-08-06-12-27-34.gh-issue-121284.8rwPxe.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,7 @@
Fix a problem where email.policy.default header refolding could incorrectly
convert an RFC 2047 encoded-word containing commas or other special
characters to unencoded, unquoted text, enabling sender or recipient
spoofing via a carefully crafted display-name.
Fix bug in the folding of rfc2047 encoded-words when flattening an email message
using a modern email policy. Previously when an encoded-word was too long
for a line, it would be decoded, split across lines, and re-encoded. But commas
and other special characters in the original text could be left unencoded and
unquoted. This could theoretically be used to spoof header lines using
a carefully constructed encoded-word if the resulting rendered email was
transmitted or re-parsed.
Loading
0