[3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25595) by miss-islington · Pull Request #25726 · python/cpython · GitHub

github.com

Tin mới

miss-islington:backport-76cd81d-3.8

GitHub CopilotWrite better code with AI

GitHub Copilot appDirect agents from issue to merge

ActionsAutomate any workflow

CodespacesInstant dev environments

IssuesPlan and track work

Code ReviewManage code changes

Code QualityEnforce quality at merge

GitHub Advanced SecurityFind and fix vulnerabilities

Code securitySecure your code as you build

Secret protectionStop leaks before they start

View all use cases

Financial services

View all industries

Software Development

GitHub SponsorsFund open source developers

Copilot for BusinessEnterprise-grade AI features

Premium SupportEnterprise-grade 24/7 support

Pull requests 2.6k

Security and quality 0

bpo-43882 - urllib.parse should sanitize urls containing ASCII newlin…

bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. #25595

View reviewed changes

Update version to 3.8.10 for 3.8 branch

View reviewed changes

View reviewed changes

Learn more about hiding disruptive comments

The reason will be displayed to describe this comment to others. Learn more.

Address Review Comment. Strip Unsafe Chars very early, and include ca…

View reviewed changes

[3.9] bpo-43882 Remove the newline, and tab early. From query and fragments. #25853

Address review comments.

needs backport to 3.7

View reviewed changes

FAIL: test_no_new_lines (tests.unit.test_utils.TestIsValidEndpointURL) ; with Python versions patched for bpo-43882 boto/botocore#2377

[3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII …

[3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII …

needs backport to 3.6

[security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline and tabs. #88048