Update of /cvsroot/mailman/mailman/Mailman
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv28659

Modified Files:
      Tag: Release_2_1-maint
        SecurityManager.py Utils.py 
Log Message:
[ 1030228 ] Mass Subscribe address with control character - can't delete
   Also, '/' can be used now.


Index: SecurityManager.py
===================================================================
RCS file: /cvsroot/mailman/mailman/Mailman/SecurityManager.py,v
retrieving revision 2.20.2.3
retrieving revision 2.20.2.4
diff -u -d -r2.20.2.3 -r2.20.2.4
--- SecurityManager.py  3 Jan 2004 01:13:26 -0000       2.20.2.3
+++ SecurityManager.py  9 Oct 2004 04:15:41 -0000       2.20.2.4
@@ -103,7 +103,7 @@
                 # A bad system error
                 raise TypeError, 'No user supplied for AuthUser context'
             secret = self.getMemberPassword(user)
-            key += 'user+%s' % Utils.ObscureEmail(user)
+            key += 'user+%s' % Utils.ObscureEmail(user).replace('/','%2f')
         elif authcontext == mm_cfg.AuthListModerator:
             secret = self.mod_password
             key += 'moderator'

Index: Utils.py
===================================================================
RCS file: /cvsroot/mailman/mailman/Mailman/Utils.py,v
retrieving revision 2.45.2.8
retrieving revision 2.45.2.9
diff -u -d -r2.45.2.8 -r2.45.2.9
--- Utils.py    18 Sep 2004 06:51:47 -0000      2.45.2.8
+++ Utils.py    9 Oct 2004 04:15:41 -0000       2.45.2.9
@@ -199,7 +199,7 @@
 
 
 # TBD: what other characters should be disallowed?
-_badchars = re.compile(r'[][()<>|;^,/\200-\377]')
+_badchars = re.compile(r'[][()<>|;^,\000-\037\177-\377]')
 
 def ValidateEmail(s):
     """Verify that the an email address isn't grossly evil."""

_______________________________________________
Mailman-checkins mailing list
[EMAIL PROTECTED]
Unsubscribe: http://mail.python.org/mailman/options/mailman-checkins/archive%40jab.org

Reply via email to