bpo-35907: Clarify the NEWS entry (GH-13557)

d9d10458 · Victor Stinner · GitHub · 25d8404c · 25d8404c · d9d10458
Commit d9d10458 authored May 24, 2019 by Victor Stinner Committed by GitHub May 24, 2019
2 changed files
--- a/Misc/NEWS.d/next/Library/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
+++ b/Misc/NEWS.d/next/Library/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
-CVE-2019-9948: Avoid file reading as disallowing the unnecessary URL scheme in
-:func:`urllib.urlopen`, :meth:`urllib.URLopener.open` and
-:meth:`urllib.URLopener.retrieve`.
--- a/Misc/NEWS.d/next/Security/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
+++ b/Misc/NEWS.d/next/Security/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
+CVE-2019-9948: Avoid file reading by disallowing ``local-file://`` and
+``local_file://`` URL schemes in :func:`urllib.urlopen`,
+:meth:`urllib.URLopener.open` and :meth:`urllib.URLopener.retrieve`.