Opened 99 minutes ago
Last modified 95 minutes ago
#37053 assigned Cleanup/optimization
Add validate=True to base64.b64decode() calls
| Reported by: | Sarah Boyce | Owned by: | Sarah Boyce |
|---|---|---|---|
| Component: | Core (Other) | Version: | dev |
| Severity: | Normal | Keywords: | |
| Cc: | Triage Stage: | Unreviewed | |
| Has patch: | yes | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description
Following the recent Python CVE https://www.cve.org/CVERecord?id=CVE-2026-3446, the security team agreed there is no reason (to our knowledge) we shouldn't be using validate=True in our base64.b64decode() calls.
Note:
See TracTickets
for help on using tickets.