STINNER Victor <vstin...@python.org> added the comment:
To be clear, the \ in 'http://benign.com\[attacker.com]' is not needed to reproduce the bug: vstinner@apu$ python3 Python 3.7.4 (default, Jul 9 2019, 16:32:37) >>> from urllib.parse import urlparse; >>> print(urlparse('http://demo.com[attacker.com]').hostname) attacker.com ---------- nosy: +vstinner _______________________________________ Python tracker <rep...@bugs.python.org> <https://bugs.python.org/issue36338> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
