#10188: HttpResponse does not filter CR/LF characters from headers
---------------------------+------------------------------------------------
 Reporter:  bthomas        |       Owner:  nobody    
   Status:  new            |   Milestone:            
Component:  Uncategorized  |     Version:  1.0       
 Keywords:                 |       Stage:  Unreviewed
Has_patch:  1              |  
---------------------------+------------------------------------------------
 E-mail headers currently throw an exception when a CR or LF character is
 put into a header (see forbid_multi_line_headers in django/core/mail.py).
 HttpResponse should have the same or equivalent protection in place,
 probably in _convert_to_ascii. A basic patch based on
 forbid_multi_line_headers attached.

-- 
Ticket URL: <http://code.djangoproject.com/ticket/10188>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to