[issue30500] urllib connects to a wrong host
Nam Nguyen
report at bugs.python.org
Mon May 29 09:24:14 EDT 2017
Nam Nguyen added the comment:
I think the best behavior is to do what popular web browsers do. Chrome and Firefox, for example, parses this is host 127.0.0.1, path /, fragment #@evil.com.
If the code does want to support username/password, it should do a custom opener (with basic HTTP authentication) instead.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue30500>
_______________________________________
More information about the Python-bugs-list
mailing list