NotificationsYou must be signed in to change notification settings
Fork33.3k
Star69.8k

[3.12] gh-80222: Fix email address header folding with long quoted-string (GH-122753)#129008

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

bitdancer merged 1 commit intopython:3.12frommiss-islington:backport-5aaf416-3.12

Jan 19, 2025

Merged

[3.12] gh-80222: Fix email address header folding with long quoted-string (GH-122753)#129008

bitdancer merged 1 commit intopython:3.12frommiss-islington:backport-5aaf416-3.12

Jan 19, 2025

Conversation

Copy link

Contributor

miss-islington commentedJan 19, 2025•
edited by bedevere-appbot
Loading

Email generators using email.policy.default could incorrectly omit the
quote ('"') characters from a quoted-string during header refolding,
leading to invalid address headers and enabling header spoofing. This
change restores the quote characters on a bare-quoted-string as the
header is refolded, and escapes backslash and quote chars in the string.
(cherry picked from commit5aaf416)

Co-authored-by: Mike Edmundsmedmunds@gmail.com

Issue:email: folding of quoted string in display_name violates RFC #80222

pythongh-80222: Fix email address header folding with long quoted-str…

04375f2

…ing (pythonGH-122753)Email generators using email.policy.default could incorrectly omit thequote ('"') characters from a quoted-string during header refolding,leading to invalid address headers and enabling header spoofing. Thischange restores the quote characters on a bare-quoted-string as theheader is refolded, and escapes backslash and quote chars in the string.(cherry picked from commit5aaf416)Co-authored-by: Mike Edmunds <medmunds@gmail.com>