requests icon indicating copy to clipboard operation
requests copied to clipboard

Use hostname for netrc instead split netloc

Open danigm opened this issue 5 months ago • 2 comments

This patch uses the "hostname" attribute from the parsed url to get the host, instead of trying to calculate the host from netloc that can produce errors when "http://username:[email protected]" format is used.

This should fix the security issue reported here: CVE-2024-47081: Netrc credential leak in PSF requests library

danigm avatar Jun 04 '25 10:06 danigm