Movatterモバイル変換
[0]ホーム
cgi security
Andrew Kuchlingakuchlin at mems-exchange.org
Wed Apr 4 10:40:36 EDT 2001
Moshe Zadka <moshez at zadka.site.co.il> writes:> No it isn't. Neither important, not possible in general. Well, it is possible> but the best regex people have come up with is ~10k characters and still> doesn't deal with the corner cases.> You want to make sure you got a valid addy? Send mail to it.It might be worth removing newlines from the submitted address though;if the CGI is doing ('From: %s' % addr), someone could be addingadditional headers to the message such as CC:. In theory you couldabuse this to spam through a script. --amk
More information about the Python-listmailing list
[8]ページ先頭