We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent bde613c commit 448a541Copy full SHA for 448a541
Lib/http/client.py
@@ -140,7 +140,8 @@
140
# These characters are not allowed within http URL paths.
141
# https://tools.ietf.org/html/rfc3986#section-3.3
142
# in order to prevent CVE-2019-9740.
143
-_contains_disallowed_url_pchar_re = re.compile('[\x00-\x20\x7f-\x9f]')
+# We don't restrict chars above \x7f as putrequest() limits us to ASCII.
144
+_contains_disallowed_url_pchar_re = re.compile('[\x00-\x20\x7f]')
145
# Arguably only these _should_ allowed:
146
# _is_allowed_url_pchars_re = re.compile(r"^[/!$&'()*+,;=:@%a-zA-Z0-9._~-]+$")
147
# We are more lenient for assumed real world compatibility purposes.
0 commit comments