Author orsenthil
Recipients Lukasa, frispete, icordasc, martin.panter, orsenthil, petr.viktorin, python-dev, remram
Date 2016-08-06.18:06:10
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1470506771.06.0.839535715744.issue27568@psf.upfronthosting.co.za>
In-reply-to
Content
Hi Hans-Peter,

In 3.3 (95b09ccc8a3e) and 3.4 (3c19023c9fec) the change completely removes any variant of http_proxy if REQUEST_METHOD is set.  The only way to have http based proxy in cgi environment by using ProxyHandler method. This is solution introduced for the security fix.

If I backport your patch from issue26804, I imagined that we will be introducing a new feature for other environment variables like NO_PROXY, which folks might be prepared for in the security fix release. That was my concern in not making the other change.  Hope this reasoning helps.
History
Date User Action Args
2016-08-06 18:06:11orsenthilsetrecipients: + orsenthil, frispete, petr.viktorin, python-dev, martin.panter, icordasc, Lukasa, remram
2016-08-06 18:06:11orsenthilsetmessageid: <1470506771.06.0.839535715744.issue27568@psf.upfronthosting.co.za>
2016-08-06 18:06:11orsenthillinkissue27568 messages
2016-08-06 18:06:10orsenthilcreate