------------------------------------------------------------
revno: 1134
committer: Mark Sapiro <[EMAIL PROTECTED]>
branch nick: 2.1
timestamp: Thu 2008-11-20 13:08:31 -0800
message:
  Fixed a problem in SecurityManager that caused it to not find the
  cookie when CheckCookie was not given a user and the user in the cookie
  had a %xx encoded character.  Bug # 299220.
modified:
  Mailman/SecurityManager.py
  NEWS

=== modified file 'Mailman/SecurityManager.py'
--- a/Mailman/SecurityManager.py        2006-07-30 19:35:36 +0000
+++ b/Mailman/SecurityManager.py        2008-11-20 21:08:31 +0000
@@ -1,4 +1,4 @@
-# Copyright (C) 1998-2006 by the Free Software Foundation, Inc.
+# Copyright (C) 1998-2008 by the Free Software Foundation, Inc.
 #
 # This program is free software; you can redistribute it and/or
 # modify it under the terms of the GNU General Public License
@@ -299,7 +299,8 @@
                         usernames.append(k[len(prefix):])
             # If any check out, we're golden.  Note: `@'s are no longer legal
             # values in cookie keys.
-            for user in [Utils.UnobscureEmail(u) for u in usernames]:
+            for user in [Utils.UnobscureEmail(urllib.unquote(u))
+                         for u in usernames]:
                 ok = self.__checkone(c, authcontext, user)
                 if ok:
                     return True

=== modified file 'NEWS'
--- a/NEWS      2008-11-14 22:09:30 +0000
+++ b/NEWS      2008-11-20 21:08:31 +0000
@@ -31,6 +31,10 @@
       in the To: or Cc: header differed in case from the case-preserved member
       address.  Bug #297795.
 
+    - Fixed a problem in SecurityManager that caused it to not find the
+      cookie when CheckCookie was not given a user and the user in the cookie
+      had a %xx encoded character.  Bug # 299220.
+
 2.1.11 (30-Jun-2008)
 
   New Features



--
Stable, maintained release series
https://code.launchpad.net/~mailman-coders/mailman/2.1

You are receiving this branch notification because you are subscribed to it.
_______________________________________________
Mailman-checkins mailing list
[email protected]
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-checkins/archive%40jab.org

Reply via email to