STINNER Victor <vstin...@python.org> added the comment:

I proposed PR 16780 which makes the urllib.parse module way more stricter:

* the IPv6 address is validated by ipaddress.IPv6Address() parser
* invalid characters are rejected in the IPv6 zone: "%", "[" and "]"
* the port number is now validated when parsing the URL: must be an integer in 
the [0; 65535] range

Sadly, validating using ipaddress.IPv6Address() cannot be easily ported to 
Python 2 which doesn't have this module.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue36338>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to