[New-bugs-announce] [issue14036] urlparse insufficient port property validation

zulla report at bugs.python.org
Fri Feb 17 00:40:39 CET 2012


New submission from zulla <dan at defendassist.com>:

The "port" component of a URL is not properly be sanitized or validated. This may lead to the evasion of netloc/hostname based filters or exceptions.

----------
components: Library (Lib)
files: testurllib.py
messages: 153512
nosy: zulla
priority: normal
severity: normal
status: open
title: urlparse insufficient port property validation
type: security
versions: Python 2.7, Python 3.1, Python 3.2, Python 3.3, Python 3.4
Added file: http://bugs.python.org/file24535/testurllib.py

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14036>
_______________________________________


More information about the New-bugs-announce mailing list