[issue29606] urllib FTP protocol stream injection
STINNER Victor
report at bugs.python.org
Fri Jul 21 06:39:49 EDT 2017
STINNER Victor added the comment:
> Wouldn't be better to solve this issue on the level of the ftplib module or FTP handler in urllib.request instead of urllib.parse?
I'm not sure that it's possible, ftplib gets the wrong hostname parameter. The best place to reject invalid characters is where the URL is parsed, no? See also my bpo-30713.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29606>
_______________________________________
More information about the Python-bugs-list
mailing list