[issue37820] Unnecessary URL scheme exists to allow 'URL: reading file in urllib

Change by Miro Hrončok : -- nosy: +hroncok nosy_count: 3.0 -> 4.0 pull_requests: +23632 pull_request: https://github.com/python/cpython/pull/24870 ___ Python tracker ___ ___

[issue37820] Unnecessary URL scheme exists to allow 'URL: reading file in urllib

Christian Heimes added the comment: It's a Python 2-only problem. Python 2 no longer receives security fixes. Please update to a supported version of Python or report the issue with your vendor. -- nosy: +christian.heimes resolution: -> wont fix stage: -> resolved status: open -> c

[issue37820] Unnecessary URL scheme exists to allow 'URL: reading file in urllib

Steve Stagg added the comment: This appears to have been fixed in python 3: rx.py: import urllib.request print(urllib.request.urlopen('URL:/etc/passwd').read()[:30]) $> python rx.py Traceback (most recent call last): File "rx.py", line 2, in print(urllib.request.urlopen('URL:/etc/pass

[issue37820] Unnecessary URL scheme exists to allow 'URL: reading file in urllib

New submission from Abdullah : I am not sure if this was reported before, fixed, or even how to report this. However this issue is similar to https://bugs.python.org/issue35907 # Vulnerability PoC import urllib print urllib.urlopen('URL:/etc/passwd').read()[:30] the result is ## # User Databas