From 82acabd3c52508d9e3f83a41fe7c684619cbbe7b Mon Sep 17 00:00:00 2001 From: Victor Stinner Date: Tue, 20 Jun 2017 16:09:06 +0200 Subject: [PATCH] bpo-30500: Fix the NEWS entry (#2296) splithost() expects an URL starting with "//" not with "http://". --- Misc/NEWS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Misc/NEWS b/Misc/NEWS index beb63bd7399..51edb1debb4 100644 --- a/Misc/NEWS +++ b/Misc/NEWS @@ -14,7 +14,7 @@ Library ------- - [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse - fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now + fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com`` as the host in an authentification (``login@host``).