Commit f5805c6f authored by Matti Picus's avatar Matti Picus
Browse files

Fix ReDoS in urllib AbstractBasicAuthHandler (BPO 43075)

--HG--
branch : release-pypy2.7-v7.x
parent 403817d8259f
Pipeline #21654 passed with stage
in 7 minutes and 12 seconds
......@@ -858,7 +858,7 @@ class AbstractBasicAuthHandler:
# (single quotes are a violation of the RFC, but appear in the wild)
rx = re.compile('(?:^|,)' # start of the string or ','
'[ \t]*' # optional whitespaces
'([^ \t]+)' # scheme like "Basic"
'([^ \t,]+)' # scheme like "Basic"
'[ \t]+' # mandatory whitespaces
# realm=xxx
# realm='xxx'
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment