#23025: URLValidator allows for invalid IPv4 addresses
-------------------------------+--------------------
Reporter: jonathan@… | Owner: nobody
Type: Uncategorized | Status: new
Component: Uncategorized | Version: 1.6
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------+--------------------
The current URLValidator allows for invalid IPV4 addresses to pass
IPV4 addresses in dot-notation can have a max value of 255 in each of the
octets. The validator only checks for the presence of 4 octets, so just
typing in all 9s `999.999.999.999` tricks the test
tests/validators/tests.py should trigger a ValidationError on cases like
this:
(URLValidator(), 'http://266.266.266.266', ValidationError),
(URLValidator(), 'http://999.999.999.999', ValidationError),
--
Ticket URL: <https://code.djangoproject.com/ticket/23025>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/064.60cbf4304fa44671872467589fdf1361%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
