#974944 mailman3-web won't allow single quote in postorius password

#974944#5
Date:
2020-11-16 21:19:25 UTC
From:
To:
Dear Maintainer,

I ran
   dpkg-reconfigure mailman3-web
and created the Postorius superuser, using a password with a quotation mark
in it.
Instead of initialising the user, it threw a python exception:

I think the setup should sanitise its arguments a bit better.


Traceback (most recent call last):
  File "/usr/bin/django-admin", line 21, in <module>
    management.execute_from_command_line()
  File "/usr/lib/python3/dist-packages/django/core/management/__init__.py", line 364, in execute_from_command_line
    utility.execute()
  File "/usr/lib/python3/dist-packages/django/core/management/__init__.py", line 356, in execute
    self.fetch_command(subcommand).run_from_argv(self.argv)
  File "/usr/lib/python3/dist-packages/django/core/management/base.py", line 283, in run_from_argv
    self.execute(*args, **cmd_options)
  File "/usr/lib/python3/dist-packages/django/core/management/base.py", line 330, in execute
    output = self.handle(*args, **options)
  File "/usr/lib/python3/dist-packages/django/core/management/commands/shell.py", line 95, in handle
    exec(options['command'])
  File "<string>", line 1
    from django.contrib.auth.models import User;               User.objects.filter(username='seL4').delete();               User.objects.create_superuser('seL4',               'root@localhost', 'a dog's life')
                                                                                                                                                                                                        ^
SyntaxError: invalid syntax

#974944#10
Date:
2022-06-24 16:24:02 UTC
From:
To:
Hi,


I think this bugreport is documenting don't use   '  in password.


Groeten
Geert Stappers
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003157#15