mirror of
https://github.com/python/cpython.git
synced 2025-08-31 05:58:33 +00:00
Issue #13703: add a way to randomize the hash values of basic types (str, bytes, datetime)
in order to make algorithmic complexity attacks on (e.g.) web apps much more complicated. The environment variable PYTHONHASHSEED and the new command line flag -R control this behavior.
This commit is contained in:
parent
ec1712a166
commit
2daf6ae249
32 changed files with 660 additions and 152 deletions
|
@ -12,6 +12,7 @@ import os
|
|||
import sys
|
||||
import tempfile
|
||||
import warnings
|
||||
import collections
|
||||
|
||||
def hexescape(char):
|
||||
"""Escape char as RFC 2396 specifies"""
|
||||
|
@ -840,8 +841,9 @@ class urlencode_Tests(unittest.TestCase):
|
|||
self.assertEqual("a=1&a=2", urllib.parse.urlencode({"a": [1, 2]}, True))
|
||||
self.assertEqual("a=None&a=a",
|
||||
urllib.parse.urlencode({"a": [None, "a"]}, True))
|
||||
data = collections.OrderedDict([("a", 1), ("b", 1)])
|
||||
self.assertEqual("a=a&a=b",
|
||||
urllib.parse.urlencode({"a": {"a": 1, "b": 1}}, True))
|
||||
urllib.parse.urlencode({"a": data}, True))
|
||||
|
||||
def test_urlencode_encoding(self):
|
||||
# ASCII encoding. Expect %3F with errors="replace'
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue