#31654: Memcached key validation raises InvalidCacheKey with clunky message.
-------------------------------------+------------------------------------
     Reporter:  Tim McCormack        |                    Owner:  felixxm
         Type:  Bug                  |                   Status:  assigned
    Component:  Core (Cache system)  |                  Version:  2.2
     Severity:  Normal               |               Resolution:
     Keywords:  memcached            |             Triage Stage:  Accepted
    Has patch:  0                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+------------------------------------

Comment (by Carlton Gibson):

 > ... results in raising an exception rather than just producing a
 warning.

 The expected behaviour is to raise the InvalidCacheKey for memcached
 backends, addressing CVE-2020-13254.

 Tim, can you post the traceback?

 (How did you hit this?)

-- 
Ticket URL: <https://code.djangoproject.com/ticket/31654#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.0c05614274dedd724a3f32f9d834cab5%40djangoproject.com.

Reply via email to