Seth Larson on Mythryl: “A neat security vulnerability in Python caused by str.lower(). Also…”

A neat security vulnerability in Python caused by str.lower(). Also includes lots of RFCs so I’m having a good time :) sethmlarson.dev/when-str-low... #security #python #idna

sethmlarson.devWhen str.lower() is a security vulnerability in PythonSome internet standards only support ASCII characters, but the world uses much more than the Latin alphabet. Thus, a mapping from Unicode to ASCII for use in domain names is required. NamePrep was...

18/8/26, 10:44 pm8 reposts20 likes

Post