bpo-35907: Clarify the NEWS entry (GH-13523)

deffee57 · Victor Stinner · GitHub · 6de4574c · deffee57
Commit deffee57 authored May 24, 2019 by Victor Stinner Committed by GitHub May 24, 2019
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 2 deletions

Misc/NEWS.d/next/Security/2019-05-21-23-20-18.bpo-35907.NC_zNK.rst ....d/next/Security/2019-05-21-23-20-18.bpo-35907.NC_zNK.rst +3 -2

No files found.
--- a/Misc/NEWS.d/next/Security/2019-05-21-23-20-18.bpo-35907.NC_zNK.rst
+++ b/Misc/NEWS.d/next/Security/2019-05-21-23-20-18.bpo-35907.NC_zNK.rst
-CVE-2019-9948: Avoid file reading as disallowing the unnecessary URL scheme in
-``URLopener().open()`` ``URLopener().retrieve()`` of :mod:`urllib.request`.
+CVE-2019-9948: Avoid file reading by disallowing ``local-file://`` and
+``local_file://`` URL schemes in ``URLopener().open()``
+``URLopener().retrieve()`` of :mod:`urllib.request`.