New submission from Quae Quack <q...@daurnimator.com>:

smtplib.sendmsg is documented to take RFC822 addresses. and e.g. if the 
`to_addrs` argument isn't provided then it gets the To address directly from 
the headers (which is in RFC822 form).

However it then proceeds to use it as an RFC821 address and sends it over the 
SMTP connection. 
https://github.com/python/cpython/blob/874809ea389e6434787e773a6054a08e0b81f734/Lib/smtplib.py#L542

----------
components: Library (Lib)
messages: 324653
nosy: Quae Quack
priority: normal
severity: normal
status: open
title: smtplib mixes RFC821 and RFC822 addresses
type: security

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue34591>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to