mirror of
https://github.com/python/cpython.git
synced 2025-09-30 20:31:52 +00:00
bpo-30500: Fix the NEWS entry (#2296)
splithost() expects an URL starting with "//" not with "http://".
This commit is contained in:
parent
536c1f1246
commit
82acabd3c5
1 changed files with 1 additions and 1 deletions
|
@ -14,7 +14,7 @@ Library
|
|||
-------
|
||||
|
||||
- [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse
|
||||
fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now
|
||||
fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now
|
||||
correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com``
|
||||
as the host in an authentification (``login@host``).
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue