[issue34104] email.message.get_payload should enforce correct encoding

2018-07-12 Thread R. David Murray
R. David Murray added the comment: It looks like the virus checkers are not doing robust decoding that the email RFCs recommend, and that thunderbird is. This is obviously a bug in the virus scanners. By default, like thunderbird, the email library does its best to decode attachments. If

[issue34104] email.message.get_payload should enforce correct encoding

2018-07-12 Thread Serge Droz
Change by Serge Droz : -- type: -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue34104] email.message.get_payload should enforce correct encoding

2018-07-12 Thread Serge Droz
New submission from Serge Droz : The issue is really this: https://noxxi.de/research/mime-5-easy-steps-to-bypass-av.html get_payload should with decode=Treu should check the validity of the syntax and throw an error if it is not. This would happen if the underlying call to base64.decode