diff options
| author | Wentao Zhang <wentao.zhang@windriver.com> | 2023-03-21 14:28:23 +0800 |
|---|---|---|
| committer | Bruce Ashfield <bruce.ashfield@gmail.com> | 2023-03-23 19:05:59 -0400 |
| commit | a8e3a87c89b26d2489cb5980a5003810c48e29f4 (patch) | |
| tree | 345fc4300c3a525a6de4de8a05f841a23bdaaee0 /recipes-devtools/python/python-docopt.inc | |
| parent | df08c3643f4a8920cd6ce90b8d6a5099d7543e61 (diff) | |
| download | meta-virtualization-a8e3a87c89b26d2489cb5980a5003810c48e29f4.tar.gz | |
botocore: Fix rejecting URLs with unsafe characters in is_valid_endpoint_url()
The function is_valid_endpoint_url() in botocore is designed to validate
endpoint URLs, but it fails to detect unsafe characters with Python 3.9.5+
and other versions carrying bpo-43882 fix. The issue is caused by urlsplit()
silently stripping LF, CR, and HT characters while splitting the URL,
which disarms the validator in botocore.
This patch detects unsafe characters in is_valid_endpoint_url() and
is_valid_ipv6_endpoint_url() early, in order to fix rejecting invalid URLs
with unsafe characters.
Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Diffstat (limited to 'recipes-devtools/python/python-docopt.inc')
0 files changed, 0 insertions, 0 deletions