Yeting LiandGitHub 7215d1ae25 bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391) ...

Fix Regular Expression Denial of Service (ReDoS) vulnerability in
urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex
has quadratic worst-case complexity and it allows cause a denial of
service when identifying crafted invalid RFCs. This ReDoS issue is on
the client side and needs remote attackers to control the HTTP server.

2021-04-07 13:27:41 +02:00

..

__init__.py

…

error.py

…

parse.py

bpo-42967: Fix urllib.parse docs and make logic clearer (GH-24536)

2021-02-15 09:00:20 -08:00

request.py

bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391)

2021-04-07 13:27:41 +02:00

response.py

bpo-12707: deprecate info(), geturl(), getcode() methods in favor of headers, url, and status properties for HTTPResponse and addinfourl (GH-11447)

2019-09-13 12:40:07 +01:00

robotparser.py

bpo-35922: Fix RobotFileParser when robots.txt has no relevant crawl delay or request rate (GH-11791)

2019-06-16 09:48:57 +03:00