GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Reject leading dashes in webbrowser.open() · Issue #143930 · python/cpython

Reject leading dashes in webbrowser.open() #143930

New issue
Copy link
New issue
Copy link
Closed
Closed
Reject leading dashes in webbrowser.open()#143930
Copy link
Labels
stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue

Description

@sethmlarson
sethmlarson
opened on Jan 16, 2026
Issue body actions

Linked PRs

  • gh-143930: Reject leading dashes in webbrowser URLs #143931
  • [3.14] gh-143930: Reject leading dashes in webbrowser URLs #146214
  • [3.13] gh-143930: Reject leading dashes in webbrowser URLs #146215
  • [3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) #146359
  • [3.12] gh-143930: Reject leading dashes in webbrowser URLs #146360
  • [3.11] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) #146364
  • gh-143930: Tweak the exception message and increase test coverage #146476
  • gh-143930: Fix typo in NEWS entry #147948
  • [3.14] gh-143930: Tweak the exception message and increase test coverage (GH-146476) #148042
  • [3.13] gh-143930: Tweak the exception message and increase test coverage (GH-146476) #148045
  • [3.12] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) #148051
  • [3.11] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) #148052
  • [3.10] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) #148053

Activity

Next
  1. sethmlarson
    added
    type-securityA security issueA security issue
    stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory
    on Jan 16, 2026
  2. sethmlarson
    added a commit that references this issue on Jan 16, 2026

    pythongh-143930: Reject leading dashes in webbrowser URLs

    b0fa074
  3. sethmlarson
    added a commit that references this issue on Mar 20, 2026

    gh-143930: Reject leading dashes in webbrowser URLs

    82a24a4
  4. miss-islington
    added 2 commits that reference this issue on Mar 20, 2026

    pythongh-143930: Reject leading dashes in webbrowser URLs

    23cdf33

    pythongh-143930: Reject leading dashes in webbrowser URLs

    9496346
  5. CuriousLearner
    added a commit that references this issue on Mar 22, 2026

    Merge remote-tracking branch 'upstream/main' into fix-pythongh-138577

    2691ad9
  6. ambv
    added 2 commits that reference this issue on Mar 23, 2026

    [3.14] gh-143930: Reject leading dashes in webbrowser URLs (GH-146214)

    9669a91

    [3.13] gh-143930: Reject leading dashes in webbrowser URLs (GH-146215)

    43fe06b
  7. ambv
    closed this as completedon Mar 23, 2026
  8. Pinky-Chaudhary
    added a commit that references this issue on Mar 24, 2026

    pythongh-143930: Reject leading dashes in webbrowser URLs

    d498b7e
  9. ambv
    added 3 commits that reference this issue on Mar 24, 2026

    [3.11] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (

    ceac1ef

    [3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (

    ad4d5ba

    [3.12] gh-143930: Reject leading dashes in webbrowser URLs (GH-146360)

    cbba611
  10. ambv commented on Mar 24, 2026

    @ambv
    ambv
    on Mar 24, 2026
    Contributor
    More actions

    Let's not close the issue before a little follow-up PR that I'd like to make here.

  11. 28 remaining items

  12. freebsd-git
    added a commit that references this issue on Apr 12, 2026

    lang/python314: Security update to 3.14.4

    cb35b3d
  13. deepin-ci-robot
    added a commit that references this issue on Apr 15, 2026

    Fix CVE-2026-4519: Reject leading dashes in URLs passed to webbrowser…

    e06c78e
  14. ljfp
    added 2 commits that reference this issue on Apr 25, 2026

    pythongh-143930: Reject leading dashes in webbrowser URLs

    5e9acf2

    pythongh-143930: Tweak the exception message and increase test covera…

    ec82537
  15. camachat
    added 2 commits that reference this issue on Jul 22, 2026

    lang/python314: Security update to 3.14.4

    7b1d556

    lang/python314: Security update to 3.14.4

    ec484f0
  16. arnout
    added a commit that references this issue on Aug 14, 2026

    package/python3: security bump to v3.12.14

    80251a0
  17. mcepl
    added 3 commits that reference this issue on Sep 18, 2026

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    9ffd3d7

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    47e2420

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    f50b92c
  18. mcepl
    added 3 commits that reference this issue on Oct 1, 2026

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    b1da1ba

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    bce78d3

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    5850d12
  19. icanhasmath
    added 2 commits that reference this issue on Oct 28, 2026

    [3.10] pythongh-143930: Reject leading dashes in webbrowser URLs (pyt…

    58011bd

    [3.10] pythongh-143930: Tweak the exception message and increase test…

    6f18487
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      You are visitor 01402503 — GeezerVison does not store the pages you look up.
      Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.