Comment 1 for bug 266178

Revision history for this message
Tokio Kikuchi (tkikuchi) wrote :

_badchars in Utils.py is essentially not for dompliance with
the RFC2822. Any printable characters can appear in local
part if you use 'quoted-string' (I vaguely suppose). This is
mainly for security in Mailman and web interface I suppose.
The character '/' was removed from this list in the CVS
after close investigation. Problem was in the cookie which
mailman send to the browser. '^' is a special character for
regular expression and must be very careful in treating
this. Another character which is listed in _badchars and
allowd in RFC2822 is '|' which is used for pipeline commands
and should be treated with care.
Again, '/' will be removed from the next 2.1.6 release.
BTW, I know '/' is used for X.400 gateway but how '^' is
used? I want to assess this priority.