commit 58c60620689cac234fa8e860412e3d7af354c776
author Senthil Kumaran <senthil@uthcode.com> Sat Jan 21 11:43:02 2012 +0800
committer Senthil Kumaran <senthil@uthcode.com> Sat Jan 21 11:43:02 2012 +0800
tree ffe6fc517e6c3cd1e8dc8937feb7e2d8e3d27a35
parent 631c25800068ce8f1d97157fd4d173a82ba32e62

Fix Issue6631 - Disallow relative files paths in urllib*.open()

Lib/urllib.py

diff --git a/Lib/urllib.py b/Lib/urllib.py
index c7af8ec..a73c5d7 100644
--- a/Lib/urllib.py
+++ b/Lib/urllib.py
@@ -484,6 +484,8 @@
             urlfile = file
             if file[:1] == '/':
                 urlfile = 'file://' + file
+            elif file[:2] == './':
+                raise ValueError("local file url may start with / or file:. Unknown url of type: %s" % url)
             return addinfourl(open(localname, 'rb'),
                               headers, urlfile)
         host, port = splitport(host)