- Bug #1100201: Cross-site scripting was possible on BaseHTTPServer via

  error messages.

diff --git a/Misc/NEWS b/Misc/NEWS
index 87eabd4e5ba29741ddff3bb730f4d66b6d31eea6..6bf130178904033112ffa855f984add5fd305425 100644 (file)
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -147,6 +147,9 @@ Extension Modules
 Library
 -------
 
+- Bug #1100201: Cross-site scripting was possible on BaseHTTPServer via
+  error messages.
+
 - Bug #1108948: Cookie.py produced invalid JavaScript code.
 
 - The tokenize module now detects and reports indentation errors.