[issue5871] email.header.Header too lax with embeded newlines

[R. David Murray]

R. David Murray <rdmurray at bitdance.com> added the comment:

Ah, I should clarify.  A sensible web application should be dealing with any multiline input it allows by turning it into a newline-less single line before using it as a subject, so the probability that there are exploitable applications out there is, I think, sufficiently low that a backport isn't needed.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue5871>
_______________________________________