summaryrefslogtreecommitdiffstats
path: root/Doc/library/urllib.request.rst
diff options
context:
space:
mode:
authorguido@google.com <guido@google.com>2011-03-29 18:41:02 (GMT)
committerguido@google.com <guido@google.com>2011-03-29 18:41:02 (GMT)
commita119df91f33724f64e6bc1ecb484eeaa30ace014 (patch)
treebe27f880b0ed6fdf79367fddc1c58019f07ca4ac /Doc/library/urllib.request.rst
parentb938c8c25316b69f1d5df2c7880a9f6b87e7c2fa (diff)
downloadcpython-a119df91f33724f64e6bc1ecb484eeaa30ace014.zip
cpython-a119df91f33724f64e6bc1ecb484eeaa30ace014.tar.gz
cpython-a119df91f33724f64e6bc1ecb484eeaa30ace014.tar.bz2
Issue 11662: Fix vulnerability in urllib/urllib2.
(This version is a cleaned-up backport of a fix by Senthil Kumaran.)
Diffstat (limited to 'Doc/library/urllib.request.rst')
-rw-r--r--Doc/library/urllib.request.rst4
1 files changed, 4 insertions, 0 deletions
diff --git a/Doc/library/urllib.request.rst b/Doc/library/urllib.request.rst
index fe61030..b4a7f28 100644
--- a/Doc/library/urllib.request.rst
+++ b/Doc/library/urllib.request.rst
@@ -783,6 +783,10 @@ HTTPRedirectHandler Objects
is the case, :exc:`HTTPError` is raised. See :rfc:`2616` for details of the
precise meanings of the various redirection codes.
+ An :class:`HTTPError` exception raised as a security consideration if the
+ HTTPRedirectHandler is presented with a redirected url which is not an HTTP,
+ HTTPS or FTP url.
+
.. method:: HTTPRedirectHandler.redirect_request(req, fp, code, msg, hdrs, newurl)