We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 4caf0a7 commit 33f52f9Copy full SHA for 33f52f9
1 file changed
Lib/urllib/request.py
@@ -1895,8 +1895,8 @@ def getproxies_environment():
1895
proxies[proxy_name] = value
1896
# CVE-2016-1000110 - If we are running as CGI script, forget HTTP_PROXY
1897
# (non-all-lowercase) as it may be set from the web server by a "Proxy:"
1898
- # header from the client
1899
- # If "proxy" is lowercase, it will still be used thanks to the next block
+ # header from the client.
+ # The below check it and only accepts the lowercase "_proxy"
1900
if 'REQUEST_METHOD' in os.environ:
1901
proxies.pop('http', None)
1902
for name, value, proxy_name in environment:
0 commit comments