Message 150522 - Python tracker (original) (raw)

Message150522

Author barry
Recipients barry, benjamin.peterson, georg.brandl
Date 2012-01-03.19:36:49
SpamBayes Score 0.05778575
Marked as misclassified No
Message-id 1325619410.45.0.862265945379.issue13703@psf.upfronthosting.co.za
In-reply-to
Content
This is already publicly known and in deep discussion on python-dev. The proper fix is still TBD. Essentially, hash collisions can be exploited to DoS a web framework that automatically parses input forms into dictionaries. Start here: http://mail.python.org/pipermail/python-dev/2011-December/115116.html
History
Date User Action Args
2012-01-03 19:36:50 barry set recipients: + barry, georg.brandl, benjamin.peterson
2012-01-03 19:36:50 barry set messageid: 1325619410.45.0.862265945379.issue13703@psf.upfronthosting.co.za
2012-01-03 19:36:49 barry link issue13703 messages
2012-01-03 19:36:49 barry create