bpo-30500: Fix the NEWS entry (#2293)

splithost() expects an URL starting with "//" not with "http://".

diff --git a/Misc/NEWS b/Misc/NEWS
index 6469986b48ce20c2a065d245ec4224801c66b16c..3af74ff31b35564f008e9ba03847b1c2e989c967 100644 (file)
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -369,7 +369,7 @@ Library
 -------
 
 - [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse
-  fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now
+  fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now
   correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com``
   as the host in an authentification (``login@host``).