I consider that it is a security vulneraibility and so should be fixed in all supported branches including 3.3 and 3.4.
If someone is blocked for a legit usecase, an old Python version can be used until we decide how to handle it. I concur with you, I don't think that anyone uses filenames containing newlines on FTP. FTP protocol is text based and uses newlines as the command separator. I expect a lot of not fun issues if someone uses such filename on legit files. Victor
_______________________________________________ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com
