diff options
author | Senthil Kumaran <senthil@uthcode.com> | 2016-07-30 23:24:16 -0700 |
---|---|---|
committer | Senthil Kumaran <senthil@uthcode.com> | 2016-07-30 23:24:16 -0700 |
commit | 50f0a6b5e0a3aeb689946abe200ab8547fa06118 (patch) | |
tree | d55b8a9d508d58a7a9ef91d5faa41bab3a3eaf75 /Python/Python-ast.c | |
parent | a00b96119106d61ec529902b499ec6bdba204335 (diff) | |
download | cpython-50f0a6b5e0a3aeb689946abe200ab8547fa06118.tar.gz |
Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.
Issue #27568 Reported and patch contributed by R?mi Rampin.
Diffstat (limited to 'Python/Python-ast.c')
0 files changed, 0 insertions, 0 deletions