Path to this page:
Subject: CVS commit: pkgsrc/www/py-rfc3986
From: Adam Ciarcinski
Date: 2020-04-11 09:11:35
Message id: 20200411071135.70993FB27@cvs.NetBSD.org
Log Message:
py-rfc3986: updated to 1.4.0
1.4.0:
Security
- Prevent users from receiving an invalid authority parsed from a malicious
URL. Previously we did not stop parsing the authority section at the first
backslash (``\\``) character. As a result, it was possible to trick our
parser into parsing up to the first forward-slash (``/``) and thus
generating an invalid authority.
Bug Fixes and Features
- Add ``from_uri`` to ``URIBuilder`` to allow creation of a ``URIBuilder``
from an existing URI.
- Fix a typographical error in our documentation.
Files: