diff options
| author | bwarsaw | 2002-05-20 14:34:42 +0000 |
|---|---|---|
| committer | bwarsaw | 2002-05-20 14:34:42 +0000 |
| commit | 36d1d1448be770bfc392dc6a374ad675089a475b (patch) | |
| tree | aa20ade5d54247d6aa26692ac0ce87848d6d0e36 /Mailman/Message.py | |
| parent | a2d3f7eb816655740a2251c902cdeb3244b085ac (diff) | |
| download | mailman-36d1d1448be770bfc392dc6a374ad675089a475b.tar.gz mailman-36d1d1448be770bfc392dc6a374ad675089a475b.tar.zst mailman-36d1d1448be770bfc392dc6a374ad675089a475b.zip | |
GetRequestURI(): Always cgi.escape() the url retrieved from the
environment. This closes a cross-site scripting hole in the admin
login pages.
Diffstat (limited to 'Mailman/Message.py')
0 files changed, 0 insertions, 0 deletions