| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
The one from cgi has been removed in Python 3.8.
|
|
|
|
|
|
|
| |
ThreadingMixIn keeps a list of all non-deamon threads since Python
3.7, which prevents all the resources from being freed. Daemonize
them so that we don't keep their resources forever, eventually
causing OOM.
|
| |
|
|
|
|
|
|
| |
We may get objects that are not subscriptable in py3, such as
map objects, so just iterate over the whole object and pop the
last separator instead.
|
| |
|
|
|
|
| |
We can't pass bytes under python3
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
types.TypeFoo are gone in python3.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
As mentioned in Debian bug #959231 ("security-tracker: Proxy Error on
CVE-2020-11565 tracker page"):
* Florian Weimer:
> * Francesco Poli:
>
>> Please note that the CVE is mentioned in [DSA-4667-1].
>>
>> [DSA-4667-1]: <https://lists.debian.org/debian-security-announce/2020/msg00071.html>
>>
>> What's wrong with that tracker page?
>
> It's something in the NVD data that breaks the HTML escaping.
This patch adds basic Unicode support to the web framework. I'm not
sure if it is the right direction to move in, but it fixes the issue.
An alternative fix would be to change the NVD importer not to put
Unicode strings into the database, by encoding them as byte strings
first.
[carnil: Slightly rewrite the commit message]
BugLink: https://bugs.debian.org/929228
BugLink: https://bugs.debian.org/959231
Signed-off-by: Florian Weimer <fw@deneb.enyo.de>
Signed-off-by: Salvatore Bonaccorso <carnil@debian.org>
|
| |
|
| |
|
| |
|
| |
|
|\ |
|
| |
| |
| |
| | |
Fixes security-tracker-team/security-tracker#3
|
|/ |
|
| |
|
|
|
|
| |
Make it possible to set arbitrary headers when returning a Result.
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@30469 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
| |
The order of inheritance matters. With the previous order, the threading
mix-in was effectively ignored.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@30431 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28965 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28928 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28881 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
| |
have a headline.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28835 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
| |
improve h1.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28803 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28801 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28798 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28797 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@28796 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
|
| |
This is required because security-tracker.debian.org sets STS and
redirects to HTTPS, and recent Firefox versions do not handle http://
redirects in this context.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@26143 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@22511 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
| |
We need to skip wrapping for lists and tuples, but wrap string and
unicode objects.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@22386 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
urllib.urlquote in Python 2.6 is more picky about its argument.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@22380 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
it should later be extended to turn CVE- strings into links too
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@13784 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
| |
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@12987 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
Introduces flatten_later helper methods in Result objects.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@12984 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
| |
Factored common functionality into base class, in preparation of
alternative invocation methods.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@12983 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
| |
This allows us to run the service on a non-default port.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@10567 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
| |
We suddenly have to deal with additional Unicode strings.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@10566 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
Fix.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@3857 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
|
| |
New method.
(URLFactory.updateParams):
Implement using updateParamsDict.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@3856 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
New function.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@3593 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
New class.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@3050 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
|
|
| |
Fix bug which caused make_pre to include only the last element of
the passed list in its output.
(__test);
Regression test.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@2509 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
|
| |
lib/python/web_support.py (URLFactory.updateParams):
New method.
(charToHTML, charToHTMLattr):
Replaces stringToHTML.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@2490 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
|
|
| |
lib/python/web_support.py (EM):
New.
(CODE):
Accept multiple arguments.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@2487 e39458fd-73e7-0310-bf30-c45bca0a0e42
|
|
|
|
|
|
|
| |
lib/python/web_support.py (RedirectResult):
Support non-permanent redirections.
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@2484 e39458fd-73e7-0310-bf30-c45bca0a0e42
|