[issue30458] CRLF Injection in httplib

2019-03-15 Thread Karthikeyan Singaravelan
Karthikeyan Singaravelan added the comment: See also https://bugs.python.org/issue36276 for a similar report. I think it's better to raise an error instead of encoding CRLF characters in URL similar to headers. I feel either of the issue and more preferably issue36276 closed as a duplicate

[issue30040] new empty dict can be more small

2019-03-15 Thread Inada Naoki
Inada Naoki added the comment: > I do not like how much code is needed for such minor optimization. PR 12307 is +46 lines. Benefit is about 10ns when first insertion. $ cpython/python.opt -m perf timeit --compare-to master/python.opt --python-names master:empty-dict2 --duplicate 100

[issue36276] Python urllib CRLF injection vulnerability

2019-03-15 Thread Karthikeyan Singaravelan
Karthikeyan Singaravelan added the comment: For reference an exact report on golang repo : https://github.com/golang/go/issues/30794 . This seemed to have been fixed in latest golang release 1.12 and commit https://github.com/golang/go/commit/829c5df58694b3345cb5ea41206783c8ccf5c3ca . The

<    1   2   3   4