Commit 8457706e authored by Victor Stinner's avatar Victor Stinner Committed by GitHub

bpo-30500: Fix the NEWS entry (#2293)

splithost() expects an URL starting with "//" not with "http://".
parent 3a7f0358
......@@ -369,7 +369,7 @@ Library
-------
- [Security] bpo-30500: Fix urllib.parse.splithost() to correctly parse
fragments. For example, ``splithost('http://127.0.0.1#@evil.com/')`` now
fragments. For example, ``splithost('//127.0.0.1#@evil.com/')`` now
correctly returns the ``127.0.0.1`` host, instead of treating ``@evil.com``
as the host in an authentification (``login@host``).
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment