aio-libs / yarl / 36414314501

98%

push

github

Validate hosts parsed by URL(str) like the builder APIs do (#1852)

* Validate hosts parsed by URL(str) like the builder APIs do

The parser encoded hosts with validate_host=False, so control characters
(NUL/C0/DEL), control characters inside an IPv6 zone identifier, and
IDNA-normalized URL delimiters (e.g. fullwidth U+FF3B -> "[") survived
into the netloc. That produced a str(url) yarl itself could not re-parse,
and hosts the builder APIs reject. Validate on parse with the same checks
the builder uses, while keeping the documented permissive acceptance of
an empty IPv6 zone identifier (#998).

Fixes #1829

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>

* Update CHANGES/1829.bugfix.rst

* Drop xfail markers for RFC 3986 cases this change fixes

* Document host validation in the URL constructor

---------

Co-authored-by: Codebuff <noreply@codebuff.com>
Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com>

84 of 168 branches covered (50.0%)

Branch coverage included in aggregate %.

32 of 32 new or added lines in 3 files covered. (100.0%)

7854 of 7958 relevant lines covered (98.69%)

0.99 hits per line