#36470: Potential log injection in development server (runserver) logging
-------------------------------------+-------------------------------------
     Reporter:  Natalia Bidart       |                    Owner:  (none)
         Type:                       |                   Status:  new
  Cleanup/optimization               |
    Component:  Core (Management     |                  Version:  dev
  commands)                          |
     Severity:  Normal               |               Resolution:
     Keywords:  runserver            |             Triage Stage:  Accepted
  log_message                        |
    Has patch:  0                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------
Comment (by Natalia Bidart):

 I think that an ideal solution would be to use
 `django.utils.log.log_response()` to implemenet
 `django.core.servers.basehttp.WSGIRequestHandler.log_message()`.
-- 
Ticket URL: <https://code.djangoproject.com/ticket/36470#comment:3>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/010701978356ed6a-6d71ff80-115c-4754-a5a7-d6798b912c69-000000%40eu-central-1.amazonses.com.

Reply via email to