[issue30713] Reject newline character (U+000A) in URLs in urllib.parse

Serhiy Storchaka report at bugs.python.org
Wed Jun 28 01:24:27 EDT 2017


Serhiy Storchaka added the comment:

First, I think urllib.parse is not the best place for doing such checks. Even if add some checks in urllib.parse, they should be added also at lower level in urllib.request or concrete protocol implementations.

Second, PR 2303 actually doesn't reject arguments with '\n'. splithost('example.org\n') will return a tuple ('example.org\n', None), etc.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue30713>
_______________________________________


More information about the Python-bugs-list mailing list