traverseda
/
cpython
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

bpo-30500: Fix the NEWS entry (#2293) 

splithost() expects an URL starting with "//" not with "http://".
This commit is contained in:
Victor Stinner 2017-06-20 16:09:22 +02:00 committed by GitHub
parent 3a7f03584a
commit 8457706ee3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Misc/NEWS
View File

@ -369,7 +369,7 @@ Library
-------
- [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse
fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now
fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now
correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com``
as the host in an authentification (``login@host``).