[ mailman-Bugs-998609 ] can subscribe with CR+LF in email address

SourceForge.net noreply at sourceforge.net
Tue Dec 14 17:27:13 CET 2004


Bugs item #998609, was opened at 2004-07-27 12:13
Message generated for change (Comment added) made by thomas_ah
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=998609&group_id=103

Category: (un)subscribing
Group: 2.1 (stable)
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: Thomas Arendsen Hein (thomas_ah)
Assigned to: Nobody/Anonymous (nobody)
Summary: can subscribe with CR+LF in email address

Initial Comment:
With Mailman 2.1.3 (didn't test with newer versions) it
is possible to subscribe with an email address which
ends with CR+LF.

A browser bug made it possible to enter this into the
single line entry field, but Mailman should check this.
A quick test shows that CR+LF is possible in the middle
of an email address, too, but of course this only works
when confirmation check is disabled.

Unsubscribing or changing the email address wasn't
possible, because there are checks against this strange
address. Only manually removing all dictionary entries
with 'withlist' helped.


----------------------------------------------------------------------

>Comment By: Thomas Arendsen Hein (thomas_ah)
Date: 2004-12-14 17:27

Message:
Logged In: YES 
user_id=839582

The patch (already in CVS) helps, thanks.



----------------------------------------------------------------------

Comment By: Tokio Kikuchi (tkikuchi)
Date: 2004-09-20 07:27

Message:
Logged In: YES 
user_id=67709

A patch is uploaded in:
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1030228&group_id=103
Can you test it ?


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=998609&group_id=103


More information about the Mailman-coders mailing list