Subject: CVS commit: pkgsrc/www/py-rfc3986
From: Adam Ciarcinski
Date: 2020-04-11 09:11:35
Message id: 20200411071135.70993FB27@cvs.NetBSD.org

Log Message:
py-rfc3986: updated to 1.4.0

1.4.0:

Security

- Prevent users from receiving an invalid authority parsed from a malicious
  URL. Previously we did not stop parsing the authority section at the first
  backslash (``\\``) character. As a result, it was possible to trick our
  parser into parsing up to the first forward-slash (``/``) and thus
  generating an invalid authority.

Bug Fixes and Features

- Add ``from_uri`` to ``URIBuilder`` to allow creation of a ``URIBuilder``
  from an existing URI.

- Fix a typographical error in our documentation.

Files:
RevisionActionfile
1.2modifypkgsrc/www/py-rfc3986/Makefile
1.2modifypkgsrc/www/py-rfc3986/distinfo