← Back to branch summary

~mailman-coders/mailman/2.1

« back to all changes in this revision

Viewing changes to Mailman/Cgi/options.py

  • Committer: Mark Sapiro
  • Date: 2023-04-26 20:34:45 UTC
  • Revision ID: mark@msapiro.net-20230426203445-1wcgx6r6btwecghd
https://launchpad.net/bugs/2017813
Fixed yet another possible list membership leak via the user options CGI.

Show diffs side-by-side

added added

removed removed

Lines of Context:
Mailman/Cgi/options.py
193
193
                   user)
194
194
            doc.addError(msgd, tag='')
195
195
            user = None
 
196
        # We get here with a non-None user in the case of a non-member with
 
197
        # private rosters.  user should be None in every case.
 
198
        user = None
196
199
        loginpage(mlist, doc, user, language)
197
200
        print doc.Format()
198
201
        return