-
-
Notifications
You must be signed in to change notification settings - Fork 170
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Incorrect handling of '..' in url path #84
Comments
Additional reference RFC2396:Section5
|
Also referring to RFC3986:Section3.3
Note the And the algorithm for the 'dotted path removal' is at RFC3986:Section5.2.4. |
Long story short
If a url's path contains a path level that is
..
it is not translated by removing the previous level from the path.Expected behaviour
Example:
A url for
http://mysite.com/lvl1/lvl2/../file.tar.gz
should be translated tohttp://mysite.com/lvl1/file.tar.gz
.Actual behaviour
The url stays as
http://mysite.com/lvl1/lvl2/../file.tar.gz
Steps to reproduce
will print:
'/simple/aiohttp-swagger/../../packages/f1/db/0d22688d79b5de9fc325c5438a0b036bca9d711f80190aa2308f7a3942ad/aiohttp-swagger-1.0.0.tar.gz'
In contrary with wget :
will result in
Note that it translates the url path before sending the request.
Your environment
Ubuntu16.04 amd64 Python3.5 yarl0.10.3
The text was updated successfully, but these errors were encountered: