[PATCH] [3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH...
authortomcruiseqi <tom33qi@gmail.com>
Tue, 24 Mar 2026 18:23:45 +0000 (02:23 +0800)
committerArnaud Rebillout <arnaudr@debian.org>
Thu, 14 May 2026 03:00:00 +0000 (10:00 +0700)
commit715eb9bfc6be8680f8eab8f38d8298fa8a09b8d5
tree13152330bba5735d5a1e9ca4eef7da3f2366e674
parent9acaad217a16412909beaba50a3d3837a8be09f6
[PATCH] [3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH-146359)

(cherry picked from commit 82a24a4442312bdcfc4c799885e8b3e00990f02b)

Co-authored-by: Seth Michael Larson <seth@python.org>
Origin: upstream, https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5

Gbp-Pq: Name CVE-2026-4519-1.patch
Lib/test/test_webbrowser.py
Lib/webbrowser.py
Misc/NEWS.d/next/Security/2026-01-16-12-04-49.gh-issue-143930.zYC5x3.rst [new file with mode: 0644]