Skip to content

[3.14] gh-143921: Reject NUL, CR and LF in IMAP commands (GH-143922, GH-153067)#153137

Merged
serhiy-storchaka merged 1 commit into
python:3.14from
serhiy-storchaka:backport-ctl-chars-3.14
Jul 7, 2026
Merged

[3.14] gh-143921: Reject NUL, CR and LF in IMAP commands (GH-143922, GH-153067)#153137
serhiy-storchaka merged 1 commit into
python:3.14from
serhiy-storchaka:backport-ctl-chars-3.14

Conversation

@serhiy-storchaka

Copy link
Copy Markdown
Member

Combined backport of GH-143922, which rejected all control characters, and GH-153067, which narrowed the check to NUL, CR and LF. Other control characters are valid in quoted strings and are sent quoted (GH-152703, already backported).

(cherry picked from commit 6262704)
(cherry picked from commit d0921ef)

…nGH-143922, pythonGH-153067)

Combined backport of pythonGH-143922, which rejected all control characters,
and pythonGH-153067, which narrowed the check to NUL, CR and LF.  Other
control characters are valid in quoted strings and are sent quoted.

(cherry picked from commit 6262704)
(cherry picked from commit d0921ef)

Co-authored-by: Seth Michael Larson <seth@python.org>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@serhiy-storchaka serhiy-storchaka merged commit 2981822 into python:3.14 Jul 7, 2026
55 checks passed
@miss-islington-app

Copy link
Copy Markdown

Thanks @serhiy-storchaka for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13.
🐍🍒⛏🤖

@serhiy-storchaka serhiy-storchaka deleted the backport-ctl-chars-3.14 branch July 7, 2026 17:13
@miss-islington-app

Copy link
Copy Markdown

Sorry, @serhiy-storchaka, I could not cleanly backport this to 3.13 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 298182272a740ce2016aee2f54acbd0bba1944c1 3.13

@bedevere-app

bedevere-app Bot commented Jul 7, 2026

Copy link
Copy Markdown

GH-153287 is a backport of this pull request to the 3.13 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.13 bugs and security fixes label Jul 7, 2026
serhiy-storchaka added a commit that referenced this pull request Jul 7, 2026
…H-153067) (GH-153137) (GH-153287)

Combined backport of GH-143922, which rejected all control characters,
and GH-153067, which narrowed the check to NUL, CR and LF.  Other
control characters are valid in quoted strings and are sent quoted.

(cherry picked from commit 6262704)
(cherry picked from commit d0921ef)
(cherry picked from commit 2981822)

Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants