element-hq / element-hq/synapse
Audit uses of urllib.parse.quote to see if the string can contain forward slashes
Open
T-Task
Z-Cleanup
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 600
- Avg merge
- 5d 22h
- Merged PRs (30d)
- 51
Description
This issue has been migrated from [#14511](https://github.com/matrix-org/synapse/issues/14511).
---
As @squahtx says, we should audit other uses of urllib.parse.quote to see if there are other problems like this.
Grep for `((urllib\.)?parse\.)?quote\(`.
_Originally posted by @DMRobertson in https://github.com/matrix-org/synapse/issues/14488#issuecomment-1320390821_
Contributor guide
Assessment
This issue has not been assessed yet.