[Python-Dev] Should urlencode() sort the query parameters (if they come from a dict)? (original) (raw)

Joao S. O. Bueno jsbueno at python.org.br
Sat Aug 18 14:01:03 CEST 2012


On 18 August 2012 02:23, Stephen J. Turnbull <stephen at xemacs.org> wrote:

Joao S. O. Bueno writes:

> I don't think this behavior is only desirable to unit tests: having > URL's been formed in predictable way a good thing in any way one > thinks about it. Especially if you're a hacker. One more thing you may be able to use against careless sites that don't expect the unexpected to occur in URLs. I'm not saying this is a bad thing, but we should remember that the whole point of PYTHONHASHSEED is that regularities can be exploited for devious and malicious purposes, and reducing regularity makes many attacks more difficult. "Any way one thinks about it" is far too strong a claim.

Ageeded that "any way one thinks about it" is far too strong a claim - but I still hold to the point. Maybe "most ways one thinks about it" :-) .

Steve



More information about the Python-Dev mailing list