Fix Issue6631 - Disallow relative file paths in urllib urlopen

This commit is contained in:
Senthil Kumaran 2012-01-21 11:52:48 +08:00
parent 002890861f
commit 3800ea9f65
4 changed files with 9 additions and 0 deletions

View file

@ -1781,6 +1781,8 @@ class URLopener:
urlfile = file
if file[:1] == '/':
urlfile = 'file://' + file
elif file[:2] == './':
raise ValueError("local file url may start with / or file:. Unknown url of type: %s" % url)
return addinfourl(open(localname, 'rb'), headers, urlfile)
raise URLError('local file error', 'not on local host')