Staging
v0.5.1
https://github.com/python/cpython
Revision 7e200e0763f5b71c199aaf98bd5588f291585619 authored by Miro Hrončok on 07 May 2019, 15:28:47 UTC, committed by Gregory P. Smith on 07 May 2019, 15:28:47 UTC
Disallow control chars in http URLs in urllib.urlopen.  This addresses a potential security problem for applications that do not sanity check their URLs where http request headers could be injected.

Disable https related urllib tests on a build without ssl (GH-13032)
These tests require an SSL enabled build. Skip these tests when python is built without SSL to fix test failures.

Use http.client.InvalidURL instead of ValueError as the new error case's exception. (GH-13044)

Backport Co-Authored-By: Miro Hrončok <miro@hroncok.cz>
1 parent 146010e
History
Tip revision: 7e200e0763f5b71c199aaf98bd5588f291585619 authored by Miro Hrončok on 07 May 2019, 15:28:47 UTC
bpo-30458: Disallow control chars in http URLs. (GH-12755) (GH-13154)
Tip revision: 7e200e0
File Mode Size
.azure-pipelines
.github
Doc
Grammar
Include
Lib
Mac
Misc
Modules
Objects
PC
PCbuild
Parser
Programs
Python
Tools
m4
.gitattributes -rw-r--r-- 1.6 KB
.gitignore -rw-r--r-- 1.5 KB
.travis.yml -rw-r--r-- 6.1 KB
CODE_OF_CONDUCT.rst -rw-r--r-- 631 bytes
LICENSE -rw-r--r-- 12.5 KB
Makefile.pre.in -rw-r--r-- 62.2 KB
README.rst -rw-r--r-- 9.9 KB
aclocal.m4 -rw-r--r-- 10.7 KB
config.guess -rwxr-xr-x 43.1 KB
config.sub -rwxr-xr-x 35.4 KB
configure -rwxr-xr-x 491.6 KB
configure.ac -rw-r--r-- 163.7 KB
install-sh -rwxr-xr-x 7.0 KB
pyconfig.h.in -rw-r--r-- 42.2 KB
setup.py -rw-r--r-- 99.7 KB

README.rst

back to top