We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 56bedf9 commit 51caa92Copy full SHA for 51caa92
Lib/urllib/request.py
@@ -1838,8 +1838,8 @@ def getproxies_environment():
1838
proxies[proxy_name] = value
1839
# CVE-2016-1000110 - If we are running as CGI script, forget HTTP_PROXY
1840
# (non-all-lowercase) as it may be set from the web server by a "Proxy:"
1841
- # header from the client
1842
- # If "proxy" is lowercase, it will still be used thanks to the next block
+ # header from the client.
+ # The below check it and only accepts the lowercase "_proxy"
1843
if 'REQUEST_METHOD' in os.environ:
1844
proxies.pop('http', None)
1845
for name, value, proxy_name in environment:
0 commit comments