view roundup/anypy/xmlrpc_.py @ 8316:e5720094a00e

fix: double escaping of data-calurl prevent use. data-calurl escaped the '&'s replacing them with the entity code. Then the value was processed again by cgi_escape_attrs double escaping the value making it unusable if passed to help_window().
author John Rouillard <rouilj@ieee.org>
date Sun, 11 May 2025 20:02:31 -0400
parents 05405220dc38
children
line wrap: on
line source

try:
    # Python 3+.
    from xmlrpc import client, server
    # If client.defusedxml == False, client.py will warn that
    # xmlrpc is insecure and defusedxml should be installed.
    client.defusedxml = False
    try:
        from defusedxml import xmlrpc
        xmlrpc.monkey_patch()
        # figure out how to allow user to set xmlrpc.MAX_DATA = bytes
        client.defusedxml = True
    except ImportError:
        # use regular xmlrpc with warnings
        pass

    server.SimpleXMLRPCDispatcher  # noqa: B018
except (ImportError, AttributeError):
    # Python 2.
    import SimpleXMLRPCServer as server
    import xmlrpclib as client  # noqa: F401
    client.defusedxml = False

Roundup Issue Tracker: http://roundup-tracker.org/