diff options
| author | klm | 1998-07-23 22:51:29 +0000 |
|---|---|---|
| committer | klm | 1998-07-23 22:51:29 +0000 |
| commit | f7d1f4909c347a4b3305f026f2ef483c48c64c7d (patch) | |
| tree | 02012543cfb2735143991287e80cd3d78626eda1 /Mailman/ListAdmin.py | |
| parent | 768be2a5981943c4176fee1d79af8f19028b51d0 (diff) | |
| download | mailman-f7d1f4909c347a4b3305f026f2ef483c48c64c7d.tar.gz mailman-f7d1f4909c347a4b3305f026f2ef483c48c64c7d.tar.zst mailman-f7d1f4909c347a4b3305f026f2ef483c48c64c7d.zip | |
do_child(): Take parameters via stdin lines, instead of command line
arguments, to avoid exposing addresses to shell.
Protocol:
line 1: batchnum
line 2: sender
line 3...n+2: n recipients
line n+3: <empty> - delimiting end of recipients
line n+4: message content
ContactTransport(): Similarly, pass parameters to contact_transport in
the same manner, via contact_transport process stdin.
This avoids both security problems (and address like `touch
/etc/passwd`, as someone on the developers list warned) and distortion
problems (shell metacharacters in addresses).
Additionally, instrumented both the main process and the child process
with a stderr logger, distinguishing the labels for the two so we can
tell them apart in the error logs.
Diffstat (limited to 'Mailman/ListAdmin.py')
0 files changed, 0 insertions, 0 deletions
