summaryrefslogtreecommitdiff
path: root/tests/validators/invalid_urls.txt
diff options
context:
space:
mode:
authorMariusz Felisiak <felisiak.mariusz@gmail.com>2021-05-24 09:55:14 +0200
committerCarlton Gibson <carlton.gibson@noumenal.es>2021-06-02 10:44:39 +0200
commit9f75e2e562fa0c0482f3dde6fc7399a9070b4a3d (patch)
tree24b1f55302cfd60a9c321ef1c00d70d42c0acd88 /tests/validators/invalid_urls.txt
parentdfaba12cda060b8b292ae1d271b44bf810b1c5b9 (diff)
[3.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.
validate_ipv4_address() was affected only on Python < 3.9.5, see [1]. URLValidator() uses a regular expressions and it was affected on all Python versions. [1] https://bugs.python.org/issue36384
Diffstat (limited to 'tests/validators/invalid_urls.txt')
-rw-r--r--tests/validators/invalid_urls.txt8
1 files changed, 8 insertions, 0 deletions
diff --git a/tests/validators/invalid_urls.txt b/tests/validators/invalid_urls.txt
index 3a92bbb9b4..86a080bf33 100644
--- a/tests/validators/invalid_urls.txt
+++ b/tests/validators/invalid_urls.txt
@@ -46,6 +46,14 @@ http://1.1.1.1.1
http://123.123.123
http://3628126748
http://123
+http://000.000.000.000
+http://016.016.016.016
+http://192.168.000.001
+http://01.2.3.4
+http://01.2.3.4
+http://1.02.3.4
+http://1.2.03.4
+http://1.2.3.04
http://.www.foo.bar/
http://.www.foo.bar./
http://[::1:2::3]:8080/