diff options
| author | Victor Stinner <victor.stinner@gmail.com> | 2017-06-20 14:09:06 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-06-20 14:09:06 (GMT) |
| commit | 82acabd3c52508d9e3f83a41fe7c684619cbbe7b (patch) | |
| tree | b7eda4b612053123b12b8a311fe3955ef61763b3 /Misc/NEWS | |
| parent | 536c1f1246f4faa302f9f5613fc3444e7ae09b4a (diff) | |
| download | cpython-82acabd3c52508d9e3f83a41fe7c684619cbbe7b.zip cpython-82acabd3c52508d9e3f83a41fe7c684619cbbe7b.tar.gz cpython-82acabd3c52508d9e3f83a41fe7c684619cbbe7b.tar.bz2 | |
bpo-30500: Fix the NEWS entry (#2296)
splithost() expects an URL starting with "//" not with "http://".
Diffstat (limited to 'Misc/NEWS')
| -rw-r--r-- | Misc/NEWS | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -14,7 +14,7 @@ Library ------- - [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse - fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now + fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com`` as the host in an authentification (``login@host``). |