Hacker News new | ask | show | jobs
by hannob 2654 days ago
Probably worth checking other implementations. The comments already mention that urllib3 is affected as well.
2 comments

I wouldn't be surprised if there are other libraries in other languages that also have the same bug.

golang had the same bug which was fixed in this commit: https://github.com/golang/go/commit/829c5df58694b3345cb5ea41...

Why does python need three different versions of urllib?
Urllib2 introduced breaking changes with urllib so a new lib was added to preserve the functionality of the old one. Urllib3 also has breaking changes but it purposely doesn't live in the standard so it can be changed more readily.
urllib and urllib2 are in the stdlib of Python2, and neither of them has a very friendly interface. They have been consolidated to just urllib in Python3.

urllib3 is a 3rd-party library that powers requests. It tries to offer a more powerful set of features behind a better interface.