8000 bpo-30458: Disallow control chars in http URLs. by gpshead · Pull Request #12755 · python/cpython · GitHub
[go: up one dir, main page]
Skip to content

bpo-30458: Disallow control chars in http URLs. #12755

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 13 commits into from
May 1, 2019
Merged

bpo-30458: Disallow control chars in http URLs. #12755

Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
97bcc4b
bpo-14826 bpo-36276: Disallow control chars in http URLs.
gpshead Apr 10, 2019
bba966c
Move validation to _splittype & correct boundary.
gpshead Apr 10, 2019
bde613c
Move the check to http.client where it belongs.
gpshead Apr 10, 2019
448a541
don't bother checking for chars above ascii.
gpshead Apr 10, 2019
944c5fa
missing f on f-string
gpshead Apr 10, 2019
f039a80
confirm that repr of the url is in the ValueError.
gpshead Apr 10, 2019
6686d66
also assert no ' ' in the quoted url
gpshead Apr 10, 2019
a754bd7
📜🤖 Added by blurb_it.
blurb-it[bot] Apr 10, 2019
95039e6
Don't abuse http.client in text_xmlrpc.
gpshead Apr 10, 2019
5589519
fix misplaced f-str
gpshead Apr 10, 2019
54f7fca
Address code review comments.
gpshead Apr 30, 2019
73db8e1
fix indentation
gpshead Apr 30, 2019
aeb2be8
Expand the tests to cover every char.
gpshead Apr 30, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Don't abuse http.client in text_xmlrpc. 
Don't abuse http.client to send a bad request via the url parameter.
  • Loading branch information
@gpshead
gpshead committed Apr 10, 2019
commit 95039e672471737faa07bffa59a653769cf6fc25
9 changes: 7 additions & 2 deletions Lib/test/test_xmlrpc.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -943,8 +943,13 @@ def test_unicode_host(self):

def test_partial_post(self):
# Check that a partial POST doesn't make the server loop: issue #14001.
with contextlib.closing(http.client.HTTPConnection(ADDR, PORT)) as conn:
conn.request('POST', '/RPC2 HTTP/1.0\r\nContent-Length: 100\r\n\r\nbye')
with contextlib.closing(socket.create_connection((ADDR, PORT))) as conn:
conn.send('POST /RPC2 HTTP/1.0\r\n'
'Content-Length: 100\r\n\r\n'
f'bye HTTP/1.1\r\n'
'Host: {ADDR}:{PORT}\r\n'
'Accept-Encoding: identity\r\n'
'Content-Length: 0\r\n\r\n'.encode('ascii'))

def test_context_manager(self):
with xmlrpclib.ServerProxy(URL) as server:
Expand Down
0