Staging
v0.5.1
https://github.com/python/cpython
Revision afe3a4975cf93c97e5d6eb8800e48f368011d37a authored by Miro Hrončok on 14 July 2019, 09:07:11 UTC, committed by larryhastings on 14 July 2019, 09:07:11 UTC
Disallow control chars in http URLs in urllib.urlopen.  This addresses a potential security problem for applications that do not sanity check their URLs where http request headers could be injected.

Disable https related urllib tests on a build without ssl (GH-13032)
These tests require an SSL enabled build. Skip these tests when python is built without SSL to fix test failures.

Use http.client.InvalidURL instead of ValueError as the new error case's exception. (GH-13044)

Co-Authored-By: Miro Hrončok <miro@hroncok.cz>
1 parent 4655d57
History
Tip revision: afe3a4975cf93c97e5d6eb8800e48f368011d37a authored by Miro Hrončok on 14 July 2019, 09:07:11 UTC
bpo-30458: Disallow control chars in http URLs. (GH-12755) (#13207)
Tip revision: afe3a49
File Mode Size
README -rw-r--r-- 67 bytes
_freeze_importlib.c -rw-r--r-- 4.4 KB
_testembed.c -rw-r--r-- 3.8 KB
python.c -rw-r--r-- 1.9 KB

README

back to top