[issue46870] Improper Input Validation in urlparse

2022-03-02 Thread Pocas
Pocas added the comment: Nice Check. So what do you think about this issue? I want to hear your opinions. -- ___ Python tracker ___ ___

[issue46870] Improper Input Validation in urlparse

2022-03-01 Thread Ned Deily
Change by Ned Deily : -- nosy: +orsenthil ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python

[issue46870] Improper Input Validation in urlparse

2022-02-27 Thread Karan
Karan added the comment: Here are the results from other languages. Go parses incorrectly at the same time rust does it correctly. Go- https://go.dev/play/p/nNMhyznuGpn &url.URL{Scheme:"http", Opaque:"@localhost", User:(*url.Userinfo)(nil), Host:"", Path:"", RawPath:"", ForceQuery:false, Raw

[issue46870] Improper Input Validation in urlparse

2022-02-26 Thread Pocas
Pocas added the comment: >>> print(urlparse('https:\\google.com')) ParseResult(scheme='https', netloc='', path='\\google.com', params='', query='', fragment='') >>> print(urlparse('https://google.com@localhost')) ParseResult(scheme='https', netloc='google.com@localhost', path='', params='', q

[issue46870] Improper Input Validation in urlparse

2022-02-26 Thread Pocas
Change by Pocas : -- type: performance -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://ma

[issue46870] Improper Input Validation in urlparse

2022-02-26 Thread Pocas
New submission from Pocas : If http:@localhost url is entered as an argument value of the urlpasre() function, the parser cannot parse it properly. Since http:@localhost is a valid URL, the character after the @ character must be parsed as a hostname. Python 3.9.10 (main, Jan 15 2022, 11:48:0