Steve Dower <steve.do...@python.org> added the comment:
Yes, it's due to that. I guess we need to do netloc.rpartition(':') like we currently do for '@' in _checknetloc. Promoting to release blocker and security issue to match the original issue. I can't get to this today, but I should be able to at the PyCon sprints next week if nobody else gets it sooner. ---------- keywords: +3.5regression, 3.6regression, 3.7regression nosy: +benjamin.peterson, larry, lukasz.langa, ned.deily priority: normal -> release blocker type: behavior -> security versions: +Python 2.7, Python 3.5, Python 3.6, Python 3.8 _______________________________________ Python tracker <rep...@bugs.python.org> <https://bugs.python.org/issue36742> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com