BE-4504 Test uses invalid IRI, Expat is now stricter presumably, removed

rickprice · rickprice · commit 3737df1a22cd · 2025-01-22T18:28:17.000-05:00
diff --git a/Lib/test/test_xml_etree.py b/Lib/test/test_xml_etree.py
@@ -1482,11 +1482,13 @@ def test_issue6233(self):
                 b"<?xml version='1.0' encoding='ascii'?>\n"
                 b'<body>t&#227;g</body>')
 
-    def test_issue3151(self):
-        e = ET.XML('<prefix:localname xmlns:prefix="${stuff}"/>')
-        self.assertEqual(e.tag, '{${stuff}}localname')
-        t = ET.ElementTree(e)
-        self.assertEqual(ET.tostring(e), b'<ns0:localname xmlns:ns0="${stuff}" />')
+    # This IRI being used (xmlns:prefix) isn't a valid IRI, and this test will never work, 
+    # because Expat is now stricter
+    # def test_issue3151(self):
+    #         e = ET.XML('<prefix:localname xmlns:prefix="${stuff}"/>')
+    #         self.assertEqual(e.tag, '{${stuff}}localname')
+    #         t = ET.ElementTree(e)
+    #         self.assertEqual(ET.tostring(e), b'<ns0:localname xmlns:ns0="${stuff}" />')
 
     def test_issue6565(self):
         elem = ET.XML("<body><tag/></body>")
diff --git a/Misc/NEWS.d/2.7.18.11.rst b/Misc/NEWS.d/2.7.18.11.rst
@@ -30,3 +30,13 @@ Python2 doesn't support PAX headers so, for the most part this doesn't affect Py
 Various tests were added from the CVE fix to improve rigour
 
 [3.12] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (GH-123543)
+
+.. bpo: ?
+.. date: 2025-01-20
+.. nonce: 
+.. release date: 2025-01-22
+.. section: xml_etree
+
+BE-4504 Use newer Expat > 2.6.3 (in particular AS Platform Expat 2.6.4)
+
+Expat is now stricter, and invalid IRIs are now rejected with a syntax error.
