diff options
| author | Victor Stinner <victor.stinner@gmail.com> | 2017-06-20 14:09:22 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-06-20 14:09:22 (GMT) |
| commit | 8457706ee308a621103e9b9c760ca9da3cc4e7c0 (patch) | |
| tree | 019636f11d3891be2d7c46589284251def538c35 /Misc/NEWS | |
| parent | 3a7f03584ab75afbf5507970711c87042e423bb4 (diff) | |
| download | cpython-8457706ee308a621103e9b9c760ca9da3cc4e7c0.zip cpython-8457706ee308a621103e9b9c760ca9da3cc4e7c0.tar.gz cpython-8457706ee308a621103e9b9c760ca9da3cc4e7c0.tar.bz2 | |
bpo-30500: Fix the NEWS entry (#2293)
splithost() expects an URL starting with "//" not with "http://".
Diffstat (limited to 'Misc/NEWS')
| -rw-r--r-- | Misc/NEWS | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -369,7 +369,7 @@ Library ------- - [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse - fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now + fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com`` as the host in an authentification (``login@host``). |