commit 3800ea9f652817e510a0db27bf124d2b80e7be10
author Senthil Kumaran <senthil@uthcode.com> Sat Jan 21 11:52:48 2012 +0800
committer Senthil Kumaran <senthil@uthcode.com> Sat Jan 21 11:52:48 2012 +0800
tree d340d0dcdf5dba0aa6617226d49fbb8a55eb34ea
parent 002890861f7bd9eeb9036a89ade5e9a59fb6fa7c

Fix  Issue6631 - Disallow relative file paths in urllib urlopen

Lib/urllib/request.py

diff --git a/Lib/urllib/request.py b/Lib/urllib/request.py
index cf065715..94b713e 100644
--- a/Lib/urllib/request.py
+++ b/Lib/urllib/request.py
@@ -1781,6 +1781,8 @@
             urlfile = file
             if file[:1] == '/':
                 urlfile = 'file://' + file
+            elif file[:2] == './':
+                raise ValueError("local file url may start with / or file:. Unknown url of type: %s" % url)
             return addinfourl(open(localname, 'rb'), headers, urlfile)
         raise URLError('local file error', 'not on local host')