| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
| |
(#25853)
* Remove the newline, and tab early. From query and fragments.
|
| |
|
|
|
|
|
|
|
|
| |
and tabs. (GH-25595) (GH-25725)
* bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25595)
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
(cherry picked from commit 76cd81d60310d65d01f9d7b48a8985d8ab89c8b4)
Co-authored-by: Senthil Kumaran <skumaran@gatech.edu>
|
| |
|
|
|
|
|
|
|
|
| |
* coerce bytes separator to string
* Add news
* Update Misc/NEWS.d/next/Library/2021-03-11-00-31-41.bpo-42967.2PeQRw.rst
(cherry picked from commit b38601d49675d90e1ee6faa47f7adaeca992d02d)
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
(cherry picked from commit fcbe0cb04d35189401c0c880ebfb4311e952d776)
* [3.9] bpo-42967: only use '&' as a query string separator (GH-24297)
bpo-42967: [security] Address a web cache-poisoning issue reported in urllib.parse.parse_qsl().
urllib.parse will only us "&" as query string separator by default instead of both ";" and "&" as allowed in earlier versions. An optional argument seperator with default value "&" is added to specify the separator.
Co-authored-by: Éric Araujo <merwok@netwok.org>
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
Co-authored-by: Adam Goldschmidt <adamgold7@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
* bpo-27657: Fix urlparse() with numeric paths
Revert parsing decision from bpo-754016 in favor of the documented
consensus in bpo-16932 of how to treat strings without a // to
designate the netloc.
* bpo-22891: Remove urlsplit() optimization for 'http' prefixed inputs.
|
| | |
|
| | |
|
| |
|
|
| |
(GH-13017)
|
| |
|
|
| |
(GH-12201)
|
| | |
|
| |
|
|
| |
Adding `max_num_fields` to `cgi.FieldStorage` to make DOS attacks harder by
limiting the number of `MiniFieldStorage` objects created by `FieldStorage`.
|
| | |
|
| | |
|
| |
|
|
| |
{Parse,Split}Result.port (GH-6078)
|
| | |
|
| |
|
|
|
|
|
|
| |
The current regex based splitting produces a wrong result. For example::
http://abc#@def
Web browsers parse that URL as ``http://abc/#@def``, that is, the host
is ``abc``, the path is ``/``, and the fragment is ``#@def``.
|
| |
|
| |
* correct parse_qs and parse_qsl test case descriptions.
|
| |\ |
|
| | |
| |
| |
| | |
Patch by Gergely Imreh and Markus Holtermann.
|
| |\ \
| |/
| |
| |
| | |
issue26775 - Improve test coverage for urllib.parse
Patch contributed by Luiz Poleto.
|
| | |
| |
| |
| | |
Patch contributed by Luiz Poleto.
|
| |/
|
|
| |
Patch by Martin Panter.
|
| |\
| |
| |
| |
| |
| | |
ParseResult and SplitResult objects.
Patch by Martin Panter.
|
| | |
| |
| |
| |
| |
| | |
ParseResult and SplitResult objects.
Patch by Martin Panter.
|
| | |
| |
| |
| |
| | |
Patch by samwyse, completed by Arnon Yaari, and reviewed by
Martin Panter.
|
| | |
| |
| |
| | |
Patch by Demian Brecht.
|
| | |
| |
| |
| |
| | |
ParseResultBytes, and SplitResultBytes to urllib.parse.__all__.
Patch by Martin Panter.
|
| |\ \
| |/
| |
| | |
These functions are not documented but used in third-party code.
|
| | |
| |
| |
| | |
These functions are not documented but used in third-party code.
|
| | |
| |
| |
| |
| |
| | |
after changes to issue22118 were submitted.
Patch contributed by Demian Brecht and reviewed by Antoine Pitrou.
|
| |/
|
|
|
|
| |
resolution of relative URLs, rather than RFCs 1808 and 2396.
Patch by Demian Brecht.
|
| |\ |
|
| | | |
|
| |\ \
| |/
| |
| |
| |
| |
| | |
requires them. Disable executable bits and shebang lines in test and
benchmark files in order to prevent using a random system python, and in
source files of modules which don't provide command line interface. Fixed
shebang lines in the unittestgui and checkpip scripts.
|
| | |
| |
| |
| |
| |
| |
| | |
requires them. Disable executable bits and shebang lines in test and
benchmark files in order to prevent using a random system python, and in
source files of modules which don't provide command line interface. Fixed
shebang line to use python3 executable in the unittestgui script.
|
| |/
|
|
| |
Original patch by Daniel Wozniak.
|
| | |
|
| | |
|
| |
|
|
| |
stricter.
|
| | |
|
| |\
| |
| |
| |
| |
| |
| |
| |
| | |
basic types (str, bytes, datetime)
in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated.
The environment variable PYTHONHASHSEED and the new command line flag -R control this
behavior.
|
| | | |
|
| | | |
|
| | | |
|
| | |
| |
| |
| | |
Petter Haggholm.
|
| |\ \
| |/ |
|
| | |
| |
| |
| | |
specific part only digits.
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r87329 | senthil.kumaran | 2010-12-17 12:48:45 +0800 (Fri, 17 Dec 2010) | 3 lines
Fix Issue9721 - urljoin behavior when the relative url starts with ';'
........
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r83701 | senthil.kumaran | 2010-08-04 10:20:44 +0530 (Wed, 04 Aug 2010) | 3 lines
Fix Issue754016 - urlparse goes wrong with IP:port without scheme
........
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r82881 | senthil.kumaran | 2010-07-14 15:51:22 +0530 (Wed, 14 Jul 2010) | 3 lines
Fix Issue5842 - Moving the tests out of urllib.parse module
........
|