#22234: Special characters in database password are not escaped correctly on
Windows platforms
----------------------------------------------+--------------------
     Reporter:  djangoproject.com@…           |      Owner:  nobody
         Type:  Bug                           |     Status:  new
    Component:  Database layer (models, ORM)  |    Version:  1.6
     Severity:  Normal                        |   Keywords:
 Triage Stage:  Unreviewed                    |  Has patch:  0
Easy pickings:  0                             |      UI/UX:  0
----------------------------------------------+--------------------
 
https://github.com/django/django/blob/master/django/db/backends/mysql/client.py#L38

 On Windows platforms, the database client command line is composed as a
 string, but no escaping whatsoever is performed on the parameters.
 Database configuration can contain special characters (especially the
 password), which would require escaping.

 Real-life case: http://stackoverflow.com/questions/22280126/sign-in-
 database-password-in-django

-- 
Ticket URL: <https://code.djangoproject.com/ticket/22234>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/075.614a4b015304f06166840683d46804eb%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to