[CVE-2019-16935] bpo-38243: Escape the server title of DocXMLRPCServer (GH-16447) 99/215299/1 accepted/tizen_5.5_base accepted/tizen_5.5_base_mobile_hotfix accepted/tizen_5.5_base_wearable_hotfix sandbox/backup/tizen_5.5_base/python_2.7.15_20191209 tizen_5.5_base_mobile_hotfix tizen_5.5_base_wearable_hotfix tizen_5.5_tv accepted/tizen/5.5/base/20191030.083110 accepted/tizen/5.5/base/mobile/hotfix/20201023.084940 accepted/tizen/5.5/base/wearable/hotfix/20201023.081305 accepted/tizen/base/20191008.101327 submit/tizen_5.5_base/20191030.000001 submit/tizen_5.5_base_mobile_hotfix/20201023.171501 submit/tizen_5.5_base_wearable_hotfix/20201023.155601 submit/tizen_base/20191007.022254 tizen_5.5.m2_release
authorDong-hee Na <donghee.na92@gmail.com>
Tue, 1 Oct 2019 10:58:01 +0000 (19:58 +0900)
committerDongHun Kwak <dh0128.kwak@samsung.com>
Mon, 7 Oct 2019 01:02:35 +0000 (10:02 +0900)
commit6cc00de451b334f69c0ca8ffda71ab33421ec07e
tree6e3d5a3ef93b56909efa545b1ec19a243cce7fce
parent831cb138ff2774a60970730b0cc2b653314077b4
[CVE-2019-16935] bpo-38243: Escape the server title of DocXMLRPCServer (GH-16447)

Escape the server title of DocXMLRPCServer.DocXMLRPCServer
when rendering the document page as HTML.

Change-Id: Id7e5a2c440b9a2e9bc832bd321740ce0c1581edf
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Lib/DocXMLRPCServer.py
Lib/test/test_docxmlrpc.py
Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst [new file with mode: 0644]