[Python-Dev] Should urlencode() sort the query parameters (if they come from a dict)? (original) (raw)

Antoine Pitrou solipsis at pitrou.net
Sat Aug 18 13:29:10 CEST 2012


On Sat, 18 Aug 2012 14:23:13 +0900 "Stephen J. Turnbull" <stephen at xemacs.org> wrote:

Joao S. O. Bueno writes:

> I don't think this behavior is only desirable to unit tests: having > URL's been formed in predictable way a good thing in any way one > thinks about it. Especially if you're a hacker. One more thing you may be able to use against careless sites that don't expect the unexpected to occur in URLs.

That's unsubstantiated. Give an example of how sorted URLs compromise security.

Regards

Antoine.

-- Software development and contracting: http://pro.pitrou.net



More information about the Python-Dev mailing list