STINNER Victor <vstin...@python.org> added the comment:
I proposed PR 16780 which makes the urllib.parse module way more stricter: * the IPv6 address is validated by ipaddress.IPv6Address() parser * invalid characters are rejected in the IPv6 zone: "%", "[" and "]" * the port number is now validated when parsing the URL: must be an integer in the [0; 65535] range Sadly, validating using ipaddress.IPv6Address() cannot be easily ported to Python 2 which doesn't have this module. ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <https://bugs.python.org/issue36338> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com