[ mailman-Bugs-1072217 ] CookieError on addresses with plus and/or equal signs

[SourceForge.net]

Bugs item #1072217, was opened at 2004-11-24 01:16
Message generated for change (Comment added) made by tkikuchi
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1072217&group_id=103

Category: Web/CGI
Group: 2.1 (stable)
>Status: Closed
Resolution: None
Priority: 5
Submitted By: Juanma Barranquero (lektu)
Assigned to: Nobody/Anonymous (nobody)
Summary: CookieError on addresses with plus and/or equal signs

Initial Comment:
The Web/CGI interface to mailmain allows the user to
set addresses where the "name" part includes "+" and
"=" chars, but chokes afterwards when trying to log in
again with such addresses (which are, I think,
perfectly fine).

For example, I registererd to the mod_python list as
xxx at yyy.com; after a while I changed it to
xxx+list=mod-python at yyy.com, which worked all right.
But trying to access the web interface brings:

Bug in Mailman version 2.1.4

We're sorry, we hit a bug!

If you would like to help us identify the problem,
please email a copy of this page to the webmaster for
this site with a description of what happened. Thanks!
Traceback:

Traceback (most recent call last):
  File "/var/mailman/scripts/driver", line 87, in run_main
    main()
  File "/var/mailman/Mailman/Cgi/options.py", line 226,
in main
    password, user):
  File "/var/mailman/Mailman/SecurityManager.py", line
226, in WebAuthenticate
    print self.MakeCookie(ac, user)
  File "/var/mailman/Mailman/SecurityManager.py", line
240, in MakeCookie
    c[key] = binascii.hexlify(marshal.dumps((issued, mac)))
  File "/usr/lib/python2.3/Cookie.py", line 581, in
__setitem__
    self.__set(key, rval, cval)
  File "/usr/lib/python2.3/Cookie.py", line 574, in __set
    M.set(key, real_value, coded_value)
  File "/usr/lib/python2.3/Cookie.py", line 453, in set
    raise CookieError("Illegal key value: %s" % key)
CookieError: Illegal key value:
mod_python+user+xxx+list=mod-python--at--yyy.com

[etc, etc]

----------------------------------------------------------------------

>Comment By: Tokio Kikuchi (tkikuchi)
Date: 2004-11-25 12:46

Message:
Logged In: YES 
user_id=67709

I've just fixed this in CVS (Release_2_1-maint).
SecurityManager.py revision 2.20.2.5


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1072217&group_id=103