Staging
v0.8.1
https://github.com/python/cpython
Revision 4f06dae5d8d4400ba38d8502da620f07d4a5696e authored by Victor Stinner on 29 May 2019, 02:30:48 UTC, committed by Ned Deily on 29 May 2019, 02:30:47 UTC
CVE-2019-9948: Avoid file reading by disallowing local-file:// and
local_file:// URL schemes in URLopener().open() and
URLopener().retrieve() of urllib.request.

Co-Authored-By: SH <push0ebp@gmail.com>
(cherry picked from commit 0c2b6a3943aa7b022e8eb4bfd9bffcddebf9a587)
(cherry picked from commit 34bab215596671d0dec2066ae7d7450cd73f638b)
1 parent 8ab624b
History
Tip revision: 4f06dae5d8d4400ba38d8502da620f07d4a5696e authored by Victor Stinner on 29 May 2019, 02:30:48 UTC
bpo-35907, CVE-2019-9948: urllib rejects local_file:// scheme (GH-13513)
Tip revision: 4f06dae
File Mode Size
Python.asdl -rw-r--r-- 5.0 KB
acceler.c -rw-r--r-- 3.3 KB
asdl.py -rw-r--r-- 12.6 KB
asdl_c.py -rw-r--r-- 43.7 KB
bitset.c -rw-r--r-- 1.0 KB
firstsets.c -rw-r--r-- 2.8 KB
grammar.c -rw-r--r-- 7.4 KB
grammar1.c -rw-r--r-- 1.3 KB
listnode.c -rw-r--r-- 1.2 KB
metagrammar.c -rw-r--r-- 2.4 KB
myreadline.c -rw-r--r-- 10.8 KB
node.c -rw-r--r-- 4.4 KB
parser.c -rw-r--r-- 11.6 KB
parser.h -rw-r--r-- 1.0 KB
parsetok.c -rw-r--r-- 10.5 KB
parsetok_pgen.c -rw-r--r-- 35 bytes
pgen.c -rw-r--r-- 17.9 KB
pgenmain.c -rw-r--r-- 4.0 KB
printgrammar.c -rw-r--r-- 2.9 KB
tokenizer.c -rw-r--r-- 54.8 KB
tokenizer.h -rw-r--r-- 3.8 KB
tokenizer_pgen.c -rw-r--r-- 36 bytes

back to top