3 people 2f630e1ce1 gh-102153: Start stripping C0 control and space chars in urlsplit (#102508) ...

`urllib.parse.urlsplit` has already been respecting the WHATWG spec a bit #25595.

This adds more sanitizing to respect the "Remove any leading C0 control or space from input" [rule](https://url.spec.whatwg.org/#url-parsing:~:text=Remove%20any%20leading%20and%20trailing%20C0%20control%20or%20space%20from%20input.) in response to [CVE-2023-24329](https://nvd.nist.gov/vuln/detail/CVE-2023-24329).

---------

Co-authored-by: Gregory P. Smith [Google] <[email protected]>

2023-05-17 01:49:20 -07:00

..

__init__.py

…

error.py

…

parse.py

gh-102153: Start stripping C0 control and space chars in urlsplit (#102508)

2023-05-17 01:49:20 -07:00

request.py

gh-81403: Fix for CacheFTPHandler in urllib (#13951)

2023-04-22 21:41:23 -07:00

response.py

…

robotparser.py

…