Dong-hee Na added the comment: I uploaded the PR which check invalid URL such as ftp://foo:bar%0d%0aINJECTED@example.net/file.png ---------- nosy: +corona10 _______________________________________ Python tracker <report at bugs.python.org> <http://bugs.python.org/issue29606> _______________________________________