summaryrefslogtreecommitdiffstats
path: root/Objects/object.c
diff options
context:
space:
mode:
authorSerhiy Storchaka <storchaka@gmail.com>2022-02-25 11:31:03 (GMT)
committerGitHub <noreply@github.com>2022-02-25 11:31:03 (GMT)
commite2e72567a1c94c548868f6ee5329363e6036057a (patch)
tree4fda0ff786291269065939cc0693ae670276dd30 /Objects/object.c
parent53ecf9e08d35801807daf74492c090a325f995b7 (diff)
downloadcpython-e2e72567a1c94c548868f6ee5329363e6036057a.zip
cpython-e2e72567a1c94c548868f6ee5329363e6036057a.tar.gz
cpython-e2e72567a1c94c548868f6ee5329363e6036057a.tar.bz2
bpo-46756: Fix authorization check in urllib.request (GH-31353)
Fix a bug in urllib.request.HTTPPasswordMgr.find_user_password() and urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated() which allowed to bypass authorization. For example, access to URI "example.org/foobar" was allowed if the user was authorized for URI "example.org/foo".
Diffstat (limited to 'Objects/object.c')
0 files changed, 0 insertions, 0 deletions