aio-libs
yarl
Blog
Docs
Changelog
Blog
Docs
Changelog
Overview
Branches
Benchmarks
Runs
Performance History
Latest Results
PyPy 3.11
Dreamsorcerer-patch-1
33 minutes ago
Reject URLs with text before bracket in host (#1654)
master
8 hours ago
Fix backslash check to only apply to host portion, not user/password
rodrigobnogueira:fix-backslash-in-netloc
12 hours ago
Fix spelling in changelog: replace netloc with authority component
rodrigobnogueira:fix-backslash-in-netloc
12 hours ago
Add changelog fragment for PR 1659
rodrigobnogueira:fix-backslash-in-netloc
12 hours ago
Relax zone ID validation: reject CTL characters per RFC 4007/9844 The _ZONE_ID_RE allowlist was based on RFC 6874's ABNF grammar, which was overly restrictive. RFC 4007 §11.2 specifies that zone IDs are OS-defined text strings with no format restriction (interface names like 'eth0', 'Ethernet (LAN)', and numeric indices are all valid). RFC 9844 §6.3 recommends rejecting characters inappropriate for the environment. For yarl this means ASCII control characters (CTL). Changes: - Replace _ZONE_ID_RE with _ZONE_ID_UNSAFE_RE that rejects CTL chars - Accept empty-zone check (::1% is still invalid) - Update tests: remove 'spaces' from invalid cases, add valid cases - Update changelog to cite RFC 9844 §6.3
rodrigobnogueira:fix-host-validation
20 hours ago
Reject URLs with text before bracket in host (#1654)
master
1 day ago
Reject URLs with text before bracket in host (#1654)
master
2 days ago
Latest Branches
CodSpeed Performance Gauge
0%
PyPy 3.11
#1660
35 minutes ago
0cd7c14
Dreamsorcerer-patch-1
CodSpeed Performance Gauge
0%
Reject backslash in URL authority per RFC 3986
#1659
12 hours ago
1cd7bc8
rodrigobnogueira:fix-backslash-in-netloc
CodSpeed Performance Gauge
0%
Fix host validation: IPv6 zone ID characters and NFKC percent bypass
#1655
20 hours ago
eb19850
rodrigobnogueira:fix-host-validation
© 2026 CodSpeed Technology
Home
Terms
Privacy
Docs