urlsplit manufactures hostnames because it strips off tabs before validating them

Bug report

Bug description:

import urllib.parse

# prints "abcxyz.test"
print(urllib.parse.urlsplit("http://abc\txyz.test/").netloc)

Current urlsplit is implemented according to this spec:

https://url.spec.whatwg.org/#concept-basic-url-parser

The spec does say in item 3 to strip tabs, but I believe there's a bug in the specification (perhaps they wanted to say leading/trailing whitespace) because the item 7 in host parsing says

If asciiDomain contains a forbidden domain code point, domain-invalid-code-point validation error, return failure.

, and tab is listed as a "forbidden domain code point". If tabs are stripped from the entire input before any other work is done, checking for tabs in host names wouldn't make much sense.

I created a bug in the specification project, so maybe they will provide some guidance later on.

https://github.com/whatwg/url/issues/829

CPython versions tested on:

3.10

Operating systems tested on:

Linux, Windows

Inizia dal punto di ingresso urllib.parse.urlsplit ed esegui il reproducer dell’issue per confermare in che modo un tab incorporato modifica il netloc. Leggi il WHATWG URL issue 829 collegato come riferimento per il conflitto nella specifica; il lavoro è completo quando i tab nel nome host non vengono trasformati silenziosamente in un nome host diverso.