Skip to content

Commit 33f52f9

Browse files
committed
Update request.py
1 parent 4caf0a7 commit 33f52f9

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

Lib/urllib/request.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1895,8 +1895,8 @@ def getproxies_environment():
18951895
proxies[proxy_name] = value
18961896
# CVE-2016-1000110 - If we are running as CGI script, forget HTTP_PROXY
18971897
# (non-all-lowercase) as it may be set from the web server by a "Proxy:"
1898-
# header from the client
1899-
# If "proxy" is lowercase, it will still be used thanks to the next block
1898+
# header from the client.
1899+
# The below check it and only accepts the lowercase "_proxy"
19001900
if 'REQUEST_METHOD' in os.environ:
19011901
proxies.pop('http', None)
19021902
for name, value, proxy_name in environment:

0 commit comments

Comments
 (0)