➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author Nam.Nguyen
Recipients Nam.Nguyen, martin.panter
Date 2017-05-29.13:24:14
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1496064254.91.0.606557680521.issue30500@psf.upfronthosting.co.za>
In-reply-to
Content 
I think the best behavior is to do what popular web browsers do. Chrome and Firefox, for example, parses this is host 127.0.0.1, path /, fragment #@evil.com.

If the code does want to support username/password, it should do a custom opener (with basic HTTP authentication) instead.
History
Date User Action Args
2017-05-29 13:24:14Nam.Nguyensetrecipients: + Nam.Nguyen, martin.panter
2017-05-29 13:24:14Nam.Nguyensetmessageid: <1496064254.91.0.606557680521.issue30500@psf.upfronthosting.co.za>
2017-05-29 13:24:14Nam.Nguyenlinkissue30500 messages
2017-05-29 13:24:14Nam.Nguyencreate