changeset: 106054:350c5a1f9cfd branch: 3.5 parent: 106035:5a417e160b34 user: Xiang Zhang date: Mon Jan 09 11:47:55 2017 +0800 files: Lib/test/test_urllib.py Lib/urllib/request.py Misc/NEWS description: Issue #29142: Fix suffixes in no_proxy handling in urllib. In urllib.request, suffixes in no_proxy environment variable with leading dots could match related hostnames again (e.g. .b.c matches a.b.c). Patch by Milan Oberkirch. diff -r 5a417e160b34 -r 350c5a1f9cfd Lib/test/test_urllib.py --- a/Lib/test/test_urllib.py Sun Jan 08 00:46:25 2017 +0000 +++ b/Lib/test/test_urllib.py Mon Jan 09 11:47:55 2017 +0800 @@ -247,11 +247,12 @@ def test_proxy_bypass_environment_host_match(self): bypass = urllib.request.proxy_bypass_environment self.env.set('NO_PROXY', - 'localhost, anotherdomain.com, newdomain.com:1234') + 'localhost, anotherdomain.com, newdomain.com:1234, .d.o.t') self.assertTrue(bypass('localhost')) self.assertTrue(bypass('LocalHost')) # MixedCase self.assertTrue(bypass('LOCALHOST')) # UPPERCASE self.assertTrue(bypass('newdomain.com:1234')) + self.assertTrue(bypass('foo.d.o.t')) # issue 29142 self.assertTrue(bypass('anotherdomain.com:8888')) self.assertTrue(bypass('www.newdomain.com:1234')) self.assertFalse(bypass('prelocalhost')) diff -r 5a417e160b34 -r 350c5a1f9cfd Lib/urllib/request.py --- a/Lib/urllib/request.py Sun Jan 08 00:46:25 2017 +0000 +++ b/Lib/urllib/request.py Mon Jan 09 11:47:55 2017 +0800 @@ -2450,6 +2450,7 @@ no_proxy_list = [proxy.strip() for proxy in no_proxy.split(',')] for name in no_proxy_list: if name: + name = name.lstrip('.') # ignore leading dots name = re.escape(name) pattern = r'(.+\.)?%s$' % name if (re.match(pattern, hostonly, re.I) diff -r 5a417e160b34 -r 350c5a1f9cfd Misc/NEWS --- a/Misc/NEWS Sun Jan 08 00:46:25 2017 +0000 +++ b/Misc/NEWS Mon Jan 09 11:47:55 2017 +0800 @@ -13,6 +13,9 @@ Library ------- +- Issue #29142: In urllib.request, suffixes in no_proxy environment variable with + leading dots could match related hostnames again (e.g. .b.c matches a.b.c). + Patch by Milan Oberkirch. What's New in Python 3.5.3 release candidate 1? ===============================================