[issue42967] [security] urllib.parse.parse_qsl(): Web cache poisoning - `; ` as a query args separator

Éric Araujo report at bugs.python.org
Sun Feb 14 12:35:01 EST 2021


Éric Araujo <merwok at netwok.org> added the comment:

I also have concerns about specifics of the implementation (see PR) and in general the behaviour change in point releases.  Maybe have a thread on python-dev?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue42967>
_______________________________________


More information about the Python-bugs-list mailing list