Message368063
> We should whitelist the protocols. The current solution with `getattr` is really fragile. For example, this crashes with a `TypeError`: `URLopener().open("unknown_proxy://test")`
Would you mind to elaborate why do you consider that the solution is incomplete? Your issue doesn't show that Python is vulnerable. TypeError *is* the expected behavior.
Would you prefer another error message? If yes, please open a seperated issue. |
|
Date |
User |
Action |
Args |
2020-05-04 16:31:12 | vstinner | set | recipients:
+ vstinner, larry, christian.heimes, ned.deily, martin.panter, matrixise, cstratak, Petter S, xtreak, push0ebp, ware |
2020-05-04 16:31:12 | vstinner | set | messageid: <1588609872.51.0.088701813118.issue35907@roundup.psfhosted.org> |
2020-05-04 16:31:12 | vstinner | link | issue35907 messages |
2020-05-04 16:31:11 | vstinner | create | |
|