Skip to content

gh-87389: avoid treating path as URI with netloc #93894

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nascheme wants to merge 19 commits into
base: main
Choose a base branch
from
Open

gh-87389: avoid treating path as URI with netloc #93894

Changes from 1 commit
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
4f76c44
wip: alternative fix for gh-87389
nascheme Jun 16, 2022
06b3879
Don't strip slashes if not building relative URL.
nascheme Jun 16, 2022
00a3a92
Add unit test for urlunsplit relative URL case.
nascheme Jun 16, 2022
a8e1cc2
sanitize paths that can be confused as scheme
nascheme Jun 16, 2022
83c8332
Add blurb.
nascheme Jun 16, 2022
f99e80b
Improve name and comment for _get_redirect_url().
nascheme Jun 16, 2022
e542578
Add urllib.parse.pathsplit() function.
nascheme Jun 16, 2022
b7b0b15
Fix blurb formating, add note about pathsplit().
nascheme Jun 16, 2022
6915331
Improve comments and docs.
nascheme Jun 16, 2022
915451c
Add basic unit test for pathsplit().
nascheme Jun 16, 2022
952a0f4
Fix markup in blurb.
nascheme Jun 16, 2022
899f512
Use pathsplit() in translate_path().
nascheme Jun 16, 2022
a00656c
Improved unit tests from gps.
nascheme Jun 16, 2022
8985853
Add test for Request-URI containing scheme.
nascheme Jun 16, 2022
f1f94ae
Make _get_redirect_url() into a method.
nascheme Jun 16, 2022
8a34cd0
Futher cleanups, remove urllib.parse.pathsplit().
nascheme Jun 16, 2022
23d4b56
reword news
gpshead Jul 3, 2022
7a71381
Merge branch 'main' into urlunsplit_relative
serhiy-storchaka May 14, 2024
d18bbd9
Merge branch 'main' into urlunsplit_relative
serhiy-storchaka May 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Use pathsplit() in translate_path(). 
This avoids "manual parsing" of the Request-URI part of the request and
matches what _get_redirect_url() does.
  • Loading branch information
@nascheme
nascheme committed Jun 16, 2022
commit 899f512ee3c6618e881c17f4ef8b6173528d1403
5 changes: 2 additions & 3 deletions Lib/http/server.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -814,9 +814,8 @@ def translate_path(self, path):
probably be diagnosed.)

"""
# abandon query parameters
path = path.split('?',1)[0]
path = path.split('#',1)[0]
# extract only path, abandon query parameters and fragment
path = urllib.parse.pathsplit(path).path
# Don't forget explicit trailing slash when normalizing. Issue17324
trailing_slash = path.rstrip().endswith('/')
try:
Expand Down