bpo-38243: Escape the server_title of DocXMLRPCServer when rendering#16373
bpo-38243: Escape the server_title of DocXMLRPCServer when rendering#16373vstinner merged 5 commits intopython:masterfrom
Conversation
|
@tirkarthi I've updated the PR, thank you for the feedback. |
|
@tirkarthi I've reflected your comment. Thanks for the review. |
Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst
Outdated
Show resolved
Hide resolved
Misc/NEWS.d/next/Security/2019-09-25-13-21-09.bpo-38243.1pfz24.rst
Outdated
Show resolved
Hide resolved
|
@vstinner Updated! |
|
GH-16439 is a backport of this pull request to the 3.8 branch. |
|
GH-16440 is a backport of this pull request to the 3.7 branch. |
|
Sorry, @corona10 and @vstinner, I could not cleanly backport this to |
Escape the server title of xmlrpc.server.DocXMLRPCServer when rendering the document page as HTML. (cherry picked from commit e8650a4) Co-authored-by: Dong-hee Na <donghee.na92@gmail.com>
|
GH-16441 is a backport of this pull request to the 3.6 branch. |
|
@corona10: I backported manually your change to 3.6. I just had to fix a simple conflict on imports. Would you mind to try to backport the change to Python 2.7 which also has the bug? |
|
|
@vstinner Sure! |
Escape the server title of xmlrpc.server.DocXMLRPCServer when rendering the document page as HTML.
Escape the server_title of DocXMLRPCServer when rendering,
The title will only be escaped when the server_title should be rendered.
https://bugs.python.org/issue38243