]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-35907, CVE-2019-9948: urllib rejects local_file:// scheme (GH-11842)
authorSH <push0ebp@gmail.com>
Tue, 21 May 2019 21:12:23 +0000 (06:12 +0900)
committerVictor Stinner <vstinner@redhat.com>
Tue, 21 May 2019 21:12:23 +0000 (23:12 +0200)
commitb15bde8058e821b383d81fcae68b335a752083ca
treec4548bf68213a636e8f4326f73f922d13fc32545
parentbb8071a4cae5ab3fe321481dd3d73662ffb26052
bpo-35907, CVE-2019-9948: urllib rejects local_file:// scheme  (GH-11842)

 CVE-2019-9948: Avoid file reading as disallowing the unnecessary URL scheme in urllib.urlopen().
Lib/test/test_urllib.py
Lib/urllib.py
Misc/NEWS.d/next/Library/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst [new file with mode: 0644]