Message255388
The issue would be if the section name came from user input. Then an attacker could craft a section name that would result in inserting arbitrary names and values into the config file. |
|
| Date |
User |
Action |
Args |
| 2015-11-25 21:36:15 | r.david.murray | set | recipients:
+ r.david.murray, terry.reedy, vstinner, lukasz.langa, spaceone |
| 2015-11-25 21:36:15 | r.david.murray | set | messageid: <1448487375.17.0.0180264224285.issue25723@psf.upfronthosting.co.za> |
| 2015-11-25 21:36:15 | r.david.murray | link | issue25723 messages |
| 2015-11-25 21:36:15 | r.david.murray | create | |
|
➜
