[Bug 1496632] [NEW] visiting the user options page with crafted post data or query fragments can produce "we hit a bug"

Public bug reported:
If one visits the user options page with a hand crafted query fragment or post data containing for example
language=en&email=&email=test&password=&login-remind=Remind
the fact that the options CGI sees 'email' as a list rather than a string throws an exception in Utils.websafe().
We will defend against this by testing in Utils.websafe() for a sequence argument and if so, returning only websafe of the first element.
** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: New

** Branch linked: lp:mailman/2.1

** Changed in: mailman Status: New => Fix Committed

** Changed in: mailman Status: Fix Committed => Fix Released
** Changed in: mailman Milestone: 2.1.21 => 2.1.21rc1
participants (2)
-
Launchpad Bug Tracker
-
Mark Sapiro