STINNER Victor added the comment: > What is wrong with an URL containing '\n'?
For the attack, see http://blog.blindspotsecurity.com/2017/02/advisory-javapython-ftp-injections.html Honestly, I don't understand well the bug :) But it doesn't seem correct to me to have a newline in a hostname. ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue29606> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
