[issue32993] urllib and webbrowser.open() can open w/ file: protocol

[Ned Deily]

Ned Deily <nad at python.org> added the comment:

This is now marked as a security issue but I do not understand what the problem is.  urllib / urllib2 are supposed to be able to open file:// style URLs, that was not the point of Issue11662.  

https://docs.python.org/3/library/urllib.request.html#urllib.request.URLopener

And webbrowser also supports file: URLs if the underlying browser does; again, that's a standard feature.

So what's the problem here?

----------
nosy: +ned.deily

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue32993>
_______________________________________