mirror of https://github.com/python/cpython
2f630e1ce1
`urllib.parse.urlsplit` has already been respecting the WHATWG spec a bit #25595. This adds more sanitizing to respect the "Remove any leading C0 control or space from input" [rule](https://url.spec.whatwg.org/#url-parsing:~:text=Remove%20any%20leading%20and%20trailing%20C0%20control%20or%20space%20from%20input.) in response to [CVE-2023-24329](https://nvd.nist.gov/vuln/detail/CVE-2023-24329). --------- Co-authored-by: Gregory P. Smith [Google] <greg@krypto.org> |
||
---|---|---|
.. | ||
__init__.py | ||
error.py | ||
parse.py | ||
request.py | ||
response.py | ||
robotparser.py |