gh-102153: Start stripping C0 control and space chars in `urlsplit` by illia-v · Pull Request #102508 · python/cpython · GitHub

github.com

Tin mới

GitHub CopilotWrite better code with AI

GitHub Copilot appDirect agents from issue to merge

ActionsAutomate any workflow

CodespacesInstant dev environments

IssuesPlan and track work

Code ReviewManage code changes

Code QualityEnforce quality at merge

GitHub Advanced SecurityFind and fix vulnerabilities

Code securitySecure your code as you build

Secret protectionStop leaks before they start

View all use cases

Financial services

View all industries

Software Development

GitHub SponsorsFund open source developers

Copilot for BusinessEnterprise-grade AI features

Premium SupportEnterprise-grade 24/7 support

Pull requests 2.6k

Security and quality 0

urllib.parse space handling CVE-2023-24329 appears unfixed #102153

: Start stripping C0 control and space chars in `urlsp…

gh-102153: fix CVE-2023-24329 #102470

Merge remote-tracking branch 'python/main' into

Expand the constant instead of computing it at import time.

Only lstrip the URL to avoid breaking applications.

Fix the unittests to allow trailing C0

View reviewed changes

Learn more about hiding disruptive comments

The reason will be displayed to describe this comment to others. Learn more.

remove a duplicate word

Update 2023-03-07-20-59-17.gh-issue-102153.14CLSZ.rst

Add urlparse and urlsplit security warnings.

needs backport to 3.11

needs backport to 3.10

Space at end of query string is trimmed scrapy/w3lib#223

Update PSF-2023-1 psf/advisory-database#80

The actual minimal python that runs Odoo 19 is 3.10.12 odoo/documentation#14790

[FIX] core: inline _WHATWG_C0_CONTROL_OR_SPACE

[FIX] core: inline _WHATWG_C0_CONTROL_OR_SPACE odoo/odoo#231371

[FIX] core: inline _WHATWG_C0_CONTROL_OR_SPACE

python/cpython#104575

python/cpython#104592

[FIX] core: inline _WHATWG_C0_CONTROL_OR_SPACE

[FIX] core: inline _WHATWG_C0_CONTROL_OR_SPACE odoo/odoo#231428

[FIX] core: inline _WHATWG_C0_CONTROL_OR_SPACE

feat(langy): agent-driven browser navigation — open the surfaced resource in place langwatch/langwatch#5980

Reject external post-login redirects bareos/bareos#2739

fix: critical 4 issues a3laaw/AETHER-STUDIO#2