summaryrefslogtreecommitdiff
path: root/Mailman/ListAdmin.py
diff options
context:
space:
mode:
authorklm1998-07-23 22:51:29 +0000
committerklm1998-07-23 22:51:29 +0000
commitf7d1f4909c347a4b3305f026f2ef483c48c64c7d (patch)
tree02012543cfb2735143991287e80cd3d78626eda1 /Mailman/ListAdmin.py
parent768be2a5981943c4176fee1d79af8f19028b51d0 (diff)
downloadmailman-f7d1f4909c347a4b3305f026f2ef483c48c64c7d.tar.gz
mailman-f7d1f4909c347a4b3305f026f2ef483c48c64c7d.tar.zst
mailman-f7d1f4909c347a4b3305f026f2ef483c48c64c7d.zip
do_child(): Take parameters via stdin lines, instead of command line
arguments, to avoid exposing addresses to shell. Protocol: line 1: batchnum line 2: sender line 3...n+2: n recipients line n+3: <empty> - delimiting end of recipients line n+4: message content ContactTransport(): Similarly, pass parameters to contact_transport in the same manner, via contact_transport process stdin. This avoids both security problems (and address like `touch /etc/passwd`, as someone on the developers list warned) and distortion problems (shell metacharacters in addresses). Additionally, instrumented both the main process and the child process with a stderr logger, distinguishing the labels for the two so we can tell them apart in the error logs.
Diffstat (limited to 'Mailman/ListAdmin.py')
0 files changed, 0 insertions, 0 deletions