STINNER Victor <vstin...@python.org> added the comment:
Python 3.5 and newer are impacted, but Python 2.7 behaves differently:
vstinner@apu$ python2
Python 2.7.16 (default, Apr 30 2019, 15:54:43)
>>> from urlparse import urlparse
>>> urlparse('http://demo.com[attacker.com]').hostname
'emo.com[attacker.com'
----------
versions: +Python 3.5, Python 3.6
_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue36338>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
