gh-143925: Reject control characters in data: URL mediatypes
authorSeth Michael Larson <seth@python.org>
Tue, 20 Jan 2026 20:45:58 +0000 (14:45 -0600)
committerArnaud Rebillout <arnaudr@debian.org>
Thu, 14 May 2026 03:00:00 +0000 (10:00 +0700)
commit18a4a9a7eb43dde6a7e0c18926c1dcd68ed1a363
tree0c366f818eadd113c86cfd96052b69c6b21a5060
parent8bbfad8b1caf461369a701a9d23a15b1c2b485a5
gh-143925: Reject control characters in data: URL mediatypes

Origin: upstream, https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f

Gbp-Pq: Name CVE-2025-15282.patch
Lib/test/test_urllib.py
Lib/urllib/request.py
Misc/NEWS.d/next/Security/2026-01-16-11-51-19.gh-issue-143925.mrtcHW.rst [new file with mode: 0644]