This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author michael.mulich
Recipients alexis, eric.araujo, michael.mulich, tarek
Date 2011-06-19.21:08:19
SpamBayes Score 0.00034874724
Marked as misclassified No
Message-id <1308517699.95.0.568809306044.issue12368@psf.upfronthosting.co.za>
In-reply-to
Content
The packaging.pypi.simple.Crawler blindly follows external download URLs. The crawler should honor a list of allowed hosts (see also the hosts parameter) before attempting to download from an external source.

Éric Araujo has also pointed out that established tools like easy_install and pip provide ways of allowing/restricting by host.
History
Date User Action Args
2011-06-19 21:08:20michael.mulichsetrecipients: + michael.mulich, tarek, eric.araujo, alexis
2011-06-19 21:08:19michael.mulichsetmessageid: <1308517699.95.0.568809306044.issue12368@psf.upfronthosting.co.za>
2011-06-19 21:08:19michael.mulichlinkissue12368 messages
2011-06-19 21:08:19michael.mulichcreate