[issue1180470] BaseHTTPServer uses deprecated mimetools.Message

Humberto Diogenes report at bugs.python.org
Sat Jun 21 23:59:12 CEST 2008


Humberto Diogenes <humberto at digi.com.br> added the comment:

This was solved in Python 3.0: http.server now uses email.parser (issue2848), which is not 
vulnerable to the DoS attack mentioned by Nick.

Should we backport these changes to 2.6? As HTTPMessage's base class was changed to 
email.message, additional work would be necessary to maintain API compatibility (ie.: 
implementing an interface similar to mimetools.Message in HTTPMessage).

----------
nosy: +hdiogenes

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue1180470>
_______________________________________


More information about the Python-bugs-list mailing list