summaryrefslogtreecommitdiff
path: root/Misc
diff options
context:
space:
mode:
authorVictor Stinner <vstinner@redhat.com>2019-09-28 09:33:00 +0200
committerNed Deily <nad@python.org>2019-09-28 03:33:00 -0400
commit1698cacfb924d1df452e78d11a4bf81ae7777389 (patch)
treef36123b12881d4cb939c6aa0dcf9c83068e7a408 /Misc
parentf0501630b0ba31448c230c756b1027647f4ef100 (diff)
downloadcpython-git-1698cacfb924d1df452e78d11a4bf81ae7777389.tar.gz
bpo-38243, xmlrpc.server: Escape the server_title (GH-16373) (GH-16441)
Escape the server title of xmlrpc.server.DocXMLRPCServer when rendering the document page as HTML. (cherry picked from commit e8650a4f8c7fb76f570d4ca9c1fbe44e91c8dfaa)
Diffstat (limited to 'Misc')
-rw-r--r--Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst b/Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst
new file mode 100644
index 0000000000..98d7be1295
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst
@@ -0,0 +1,3 @@
+Escape the server title of :class:`xmlrpc.server.DocXMLRPCServer`
+when rendering the document page as HTML.
+(Contributed by Dong-hee Na in :issue:`38243`.)