id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
1135	Check django.core.mail against SMTP header injection attacks	Simon Willison	Adrian Holovaty	"James Bennett brought this up here:

http://groups.google.com/group/django-users/browse_thread/thread/aae390deedaebb0c/8655b4032d2775e5

We should make sure that Django's built in email stuff is defended against SMTP header injection attacks, as described here:

http://securephp.damonkohler.com/index.php/Email_Injection

I'm not sure if Python's smtplib protects us here or not."	defect	closed	Core (Other)		normal	fixed			Unreviewed	0	0	0	0	0	0