[Python-Dev] Path object design
Nick Coghlan
ncoghlan at gmail.com
Sat Nov 4 05:38:53 CET 2006
Steve Holden wrote:
> Having said this, Andrew *did* demonstrate quite convincingly that the
> current urljoin has some fairly egregious directory traversal glitches.
> Is it really right to punt obvious gotchas like
>
> >>>urlparse.urljoin("http://blah.com/a/b/c", "../../../../")
>
> 'http://blah.com/../../'
>
> >>>
>
> to the server?
See Paul Jimenez's thread about replacing urlparse with something better. The
current module has some serious issues :)
Cheers,
Nick.
--
Nick Coghlan | ncoghlan at gmail.com | Brisbane, Australia
---------------------------------------------------------------
http://www.boredomandlaziness.org
More information about the Python-Dev
mailing list