gh-143925: Reject control characters in data: URL mediatypes
authorSeth Michael Larson <seth@python.org>
Tue, 20 Jan 2026 20:45:58 +0000 (14:45 -0600)
committerArnaud Rebillout <arnaudr@debian.org>
Tue, 14 Apr 2026 04:38:32 +0000 (11:38 +0700)
commit921c6fed011d661b857a564993d71d10fec76b48
tree4459e131e300831630af8e035dce260d50fd976e
parentedb512d279133421bc36814b49c08fd3c9c841ef
gh-143925: Reject control characters in data: URL mediatypes

Origin: upstream, https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f

Gbp-Pq: Name CVE-2025-15282.patch
Lib/test/test_urllib.py
Lib/urllib/request.py
Misc/NEWS.d/next/Security/2026-01-16-11-51-19.gh-issue-143925.mrtcHW.rst [new file with mode: 0644]