-
Miss Islington (bot) authored
Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run "openssl" commands. Issue reported and initial fix by Caleb Shortt. Remove the Windows code path to send "quit" on stdin to the "openssl s_client" command: use DEVNULL on all platforms instead. Co-authored-by:
Caleb Shortt <caleb@rgauge.com> (cherry picked from commit 83a0f44f) Co-authored-by:
Victor Stinner <vstinner@python.org>
Miss Islington (bot) authoredFix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run "openssl" commands. Issue reported and initial fix by Caleb Shortt. Remove the Windows code path to send "quit" on stdin to the "openssl s_client" command: use DEVNULL on all platforms instead. Co-authored-by:
Caleb Shortt <caleb@rgauge.com> (cherry picked from commit 83a0f44f) Co-authored-by:
Victor Stinner <vstinner@python.org>