Skip to content

Avoid rescanning malformed author emails#571

Open
gaoflow wants to merge 1 commit into
kurtmckee:mainfrom
gaoflow:fix-562-author-email-redos
Open

Avoid rescanning malformed author emails#571
gaoflow wants to merge 1 commit into
kurtmckee:mainfrom
gaoflow:fix-562-author-email-redos

Conversation

@gaoflow

@gaoflow gaoflow commented Jun 19, 2026

Copy link
Copy Markdown

Summary:

  • anchor the author email regex so malformed email-like values are not repeatedly rescanned from inside the same token
  • add a regression test for the reported dotted-domain payload
  • add the changelog fragment and contributor entry

Fixes #562.

Tests:

  • python -m pytest -q
  • python -m mypy
  • black --check --target-version py310 feedparser/mixin.py tests/test_author_email.py
  • isort --check-only feedparser/mixin.py tests/test_author_email.py
  • flake8 feedparser/mixin.py tests/test_author_email.py
  • python -m compileall -q feedparser tests
  • git diff --check

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ReDoS vulnerability in email regex in mixin.py (feedparser ≤ 6.0.11)

1 participant