diff options
author | Serhiy Storchaka <storchaka@gmail.com> | 2022-02-25 11:31:03 (GMT) |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-02-25 11:31:03 (GMT) |
commit | e2e72567a1c94c548868f6ee5329363e6036057a (patch) | |
tree | 4fda0ff786291269065939cc0693ae670276dd30 /Objects/object.c | |
parent | 53ecf9e08d35801807daf74492c090a325f995b7 (diff) | |
download | cpython-e2e72567a1c94c548868f6ee5329363e6036057a.zip cpython-e2e72567a1c94c548868f6ee5329363e6036057a.tar.gz cpython-e2e72567a1c94c548868f6ee5329363e6036057a.tar.bz2 |
bpo-46756: Fix authorization check in urllib.request (GH-31353)
Fix a bug in urllib.request.HTTPPasswordMgr.find_user_password() and
urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated() which
allowed to bypass authorization. For example, access to URI "example.org/foobar"
was allowed if the user was authorized for URI "example.org/foo".
Diffstat (limited to 'Objects/object.c')
0 files changed, 0 insertions, 0 deletions