On Sun, 12 Feb 2012 21:44:22 +0100 "Martin v. Löwis" <mar...@v.loewis.de> wrote: > > Given the randomization fix will ship disabled, I thought it would be > > nice to add a maximum element count argument to urlparse.parse_qs, with > > a default value of e.g. 1000 (including in bugfix releases). What do > > you think? > > It's an API change, so it is > a) in violation with current practice for bug fix releases, and
We are already violating a lot of things in order to fix this issue. > b) of limited use for existing installations which won't use the API. Obviously it won't fix vulnerabilities due to some other API. If you propose other APIs we can also fix them. Regards Antoine. _______________________________________________ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe: http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com