bpo-30458: Disallow control chars in http URLs.#12755

Merged

gpshead merged 13 commits into

python:masterfrom

gpshead:url-no-control-chars

May 1, 2019

Commits on Apr 10, 2019

bpo-14826 bpo-36276: Disallow control chars in http URLs.
Show description for 97bcc4b
gpshead
committed
97bcc4b
Copy full SHA for 97bcc4b
Move validation to _splittype & correct boundary.
gpshead
committed
bba966c
Copy full SHA for bba966c
Move the check to http.client where it belongs.
gpshead
committed
bde613c
Copy full SHA for bde613c
don't bother checking for chars above ascii.
gpshead
committed
448a541
Copy full SHA for 448a541
missing f on f-string
gpshead
committed
944c5fa
Copy full SHA for 944c5fa
confirm that repr of the url is in the ValueError.
gpshead
committed
f039a80
Copy full SHA for f039a80
also assert no ' ' in the quoted url
gpshead
committed
6686d66
Copy full SHA for 6686d66
📜🤖 Added by blurb_it.
blurb-it[bot]
committed
a754bd7
Copy full SHA for a754bd7
Don't abuse http.client in text_xmlrpc.
Show description for 95039e6
gpshead
committed
95039e6
Copy full SHA for 95039e6
fix misplaced f-str
gpshead
authored
5589519
Copy full SHA for 5589519

Commits on Apr 30, 2019

Address code review comments.
Show description for 54f7fca
gpshead
committed
54f7fca
Copy full SHA for 54f7fca
fix indentation
gpshead
committed
73db8e1
Copy full SHA for 73db8e1
Expand the tests to cover every char.
Show description for aeb2be8
gpshead
committed
aeb2be8
Copy full SHA for aeb2be8