]> granicus.if.org Git - python/commit
Prevent HTTPoxy attack (CVE-2016-1000110)
authorSenthil Kumaran <senthil@uthcode.com>
Sat, 30 Jul 2016 12:49:53 +0000 (05:49 -0700)
committerSenthil Kumaran <senthil@uthcode.com>
Sat, 30 Jul 2016 12:49:53 +0000 (05:49 -0700)
commit75d7b615ba70fc5759d16dee95bbd8f0474d8a9c
tree6fedc2530db2160bf68039a3bf28b4fefbb39743
parenta850ef698e55d07173051747e96207496c6f1bdb
Prevent HTTPoxy attack (CVE-2016-1000110)

Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue reported and patch contributed by RĂ©mi Rampin.
Doc/howto/urllib2.rst
Doc/library/urllib.rst
Doc/library/urllib2.rst
Lib/test/test_urllib.py
Lib/urllib.py
Misc/ACKS
Misc/NEWS