projects / python3.9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 25fd224) | patch
[3.9] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 4 Sep 2024 15:49:40 +0000 (17:49 +0200)
committerAdrian Bunk <bunk@debian.org>
Sun, 1 Dec 2024 12:12:57 +0000 (14:12 +0200)
commit8a21cc7f4b70b1b75e7785c19f8a1eb333c580b2
tree8ac67a199ba3481af9a2d188a4b2798493a8d7eatree | snapshot
parent25fd22489e1f7b33aed8d55c012f8191edaa6deecommit | diff
[3.9] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123107)

This fixes CVE-2024-7592.
(cherry picked from commit 44e458357fca05ca0ae2658d62c8c595b048b5ef)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Gbp-Pq: Name 0024-3.9-gh-123067-Fix-quadratic-complexity-in-parsing-qu.patch
Lib/http/cookies.py diff | blob | history
Lib/test/test_http_cookies.py diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.