Message 272104 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	orsenthil
Recipients	Lukasa, frispete, icordasc, martin.panter, orsenthil, petr.viktorin, python-dev, remram
Date	2016-08-06.18:06:10
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1470506771.06.0.839535715744.issue27568@psf.upfronthosting.co.za>
In-reply-to

Content
Hi Hans-Peter, In 3.3 (95b09ccc8a3e) and 3.4 (3c19023c9fec) the change completely removes any variant of http_proxy if REQUEST_METHOD is set. The only way to have http based proxy in cgi environment by using ProxyHandler method. This is solution introduced for the security fix. If I backport your patch from issue26804, I imagined that we will be introducing a new feature for other environment variables like NO_PROXY, which folks might be prepared for in the security fix release. That was my concern in not making the other change. Hope this reasoning helps.

Hi Hans-Peter,

In 3.3 (95b09ccc8a3e) and 3.4 (3c19023c9fec) the change completely removes any variant of http_proxy if REQUEST_METHOD is set.  The only way to have http based proxy in cgi environment by using ProxyHandler method. This is solution introduced for the security fix.

If I backport your patch from issue26804, I imagined that we will be introducing a new feature for other environment variables like NO_PROXY, which folks might be prepared for in the security fix release. That was my concern in not making the other change.  Hope this reasoning helps.

History
Date	User	Action	Args
2016-08-06 18:06:11	orsenthil	set	recipients: + orsenthil, frispete, petr.viktorin, python-dev, martin.panter, icordasc, Lukasa, remram
2016-08-06 18:06:11	orsenthil	set	messageid: <1470506771.06.0.839535715744.issue27568@psf.upfronthosting.co.za>
2016-08-06 18:06:11	orsenthil	link	issue27568 messages
2016-08-06 18:06:10	orsenthil	create