gh-143925: Reject control characters in data: URL mediatypes
authorSeth Michael Larson <seth@python.org>
Tue, 20 Jan 2026 20:45:58 +0000 (14:45 -0600)
committerAndrej Shadura <andrewsh@debian.org>
Sun, 25 Jan 2026 13:37:52 +0000 (14:37 +0100)
commit2f324a6976129fda41c4ddca40a47ad8b8f2a32b
tree493dcf3c99102bd2c02c35752b2fafccbbbefe2a
parent92bfcc63a75163f36e23bacd5788138e73dba029
gh-143925: Reject control characters in data: URL mediatypes

Origin: upstream, https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f

Gbp-Pq: Name CVE-2025-15282.patch
Lib/test/test_urllib.py
Lib/urllib/request.py
Misc/NEWS.d/next/Security/2026-01-16-11-51-19.gh-issue-143925.mrtcHW.rst [new file with mode: 0644]