[issue29606] urllib FTP protocol stream injection

STINNER Victor report at bugs.python.org
Fri Jul 21 06:39:49 EDT 2017


STINNER Victor added the comment:

> Wouldn't be better to solve this issue on the level of the ftplib module or FTP handler in urllib.request instead of urllib.parse?

I'm not sure that it's possible, ftplib gets the wrong hostname parameter. The best place to reject invalid characters is where the URL is parsed, no? See also my bpo-30713.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29606>
_______________________________________


More information about the Python-bugs-list mailing list