This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author yao zhihua
Recipients orsenthil, yao zhihua
Date 2018-03-05.05:26:58
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1520227618.16.0.467229070634.issue32993@psf.upfronthosting.co.za>
In-reply-to
Content
I also found a function without filtering file protocol.

poc:

import webbrowser
webbrowser.open('file:///etc/passwd')
History
Date User Action Args
2018-03-05 05:26:58yao zhihuasetrecipients: + yao zhihua, orsenthil
2018-03-05 05:26:58yao zhihuasetmessageid: <1520227618.16.0.467229070634.issue32993@psf.upfronthosting.co.za>
2018-03-05 05:26:58yao zhihualinkissue32993 messages
2018-03-05 05:26:58yao zhihuacreate