[issue32084] [Security] http.server can be abused to redirect to (almost) arbitrary URL

[Ned Deily]

Ned Deily <nad at python.org> added the comment:

This looks like a duplicate of Issue43223 which has a PR in progress.

----------
nosy: +ned.deily
resolution:  -> duplicate
stage:  -> resolved
status: open -> closed
superseder:  -> [security] http.server: Open Redirection if the URL path starts with //

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue32084>
_______________________________________