Skip to content

Commit 51caa92

Browse files
authored
Update request.py
1 parent 56bedf9 commit 51caa92

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Lib/urllib/request.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1838,8 +1838,8 @@ def getproxies_environment():
18381838
proxies[proxy_name] = value
18391839
# CVE-2016-1000110 - If we are running as CGI script, forget HTTP_PROXY
18401840
# (non-all-lowercase) as it may be set from the web server by a "Proxy:"
1841-
# header from the client
1842-
# If "proxy" is lowercase, it will still be used thanks to the next block
1841+
# header from the client.
1842+
# The below check it and only accepts the lowercase "_proxy"
18431843
if 'REQUEST_METHOD' in os.environ:
18441844
proxies.pop('http', None)
18451845
for name, value, proxy_name in environment:

0 commit comments

Comments
 (0)