]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 94a7a4e) | patch
Added a warning to the urljoin docs, indicating that it is not safe to use with attac...
authorAlex Gaynor <alex.gaynor@gmail.com>
Fri, 15 Nov 2024 23:09:05 +0000 (18:09 -0500)
committerGitHub <noreply@github.com>
Fri, 15 Nov 2024 23:09:05 +0000 (18:09 -0500)
commitd6bcc154e93a0a20ab97187d3e8b726fffb14f8f
tree6c1943b1e4e44e5cdfff45ecb2557a48e2445db5tree | snapshot
parent94a7a4e22fb8f567090514785c69e65298acca42commit | diff
Added a warning to the urljoin docs, indicating that it is not safe to use with attacker controlled URLs (GH-126659)

This was flagged to me at a party today by someone who works in red-teaming as a frequently encountered footgun. Documenting the potentially unexpected behavior seemed like a good place to start.
Doc/library/urllib.parse.rst diff | blob | blame | history
Mirror of https://github.com/python/cpython.git