yao zhihua <hackyzh...@gmail.com> added the comment:
I also found a function without filtering file protocol.
poc:
import webbrowser
webbrowser.open('file:///etc/passwd')
----------
_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue32993>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
