On Sun, Feb 6, 2022 at 9:13 AM Paul Moore wrote:
> On Sun, 6 Feb 2022 at 16:51, Christian Heimes
> wrote:
>
> > The urllib package -- and to some degree also the http package -- are
> > constant source of security bugs. The code is old and the parsers for
> > HTTP and URLs don't handle edge case
On 2/6/22 6:08 AM, Victor Stinner wrote:
> I propose to deprecate the urllib module in Python 3.11. It would emit
> a DeprecationWarning which warn users, so users should consider better
> alternatives like urllib3 or httpx: well known modules, better
> maintained, more secure, support HTTP/2 (ht
Chiming in to say that whichever way this goes urllib3 would be okay. We can
always vendor the small amount of http.client logic we actually depend on for
HTTP connections. I do agree that the future of HTTP clearly lies outside the
standard library, our team is already thinking about ways to in
On Sun, Feb 6, 2022 at 3:35 PM Paul Moore wrote:
> urllib.request may not be "best practice", but it's still extremely
> useful for simple situations, and urllib.parse is useful for basic
> handling of URLs.Yes, the more complex aspects of urllib are better
> handled by external packages, but that
El dom, 6 feb 2022 a las 9:12, Paul Moore () escribió:
> On Sun, 6 Feb 2022 at 16:51, Christian Heimes
> wrote:
>
> > The urllib package -- and to some degree also the http package -- are
> > constant source of security bugs. The code is old and the parsers for
> > HTTP and URLs don't handle edge
On Sun, 6 Feb 2022 at 16:51, Christian Heimes wrote:
> The urllib package -- and to some degree also the http package -- are
> constant source of security bugs. The code is old and the parsers for
> HTTP and URLs don't handle edge cases well. Python core lacks a true
> maintainer of the code. To
On Sun, 6 Feb 2022 at 14:15, Victor Stinner wrote:
> I propose to deprecate the urllib module in Python 3.11. It would emit
> a DeprecationWarning which warn users, so users should consider better
> alternatives like urllib3 or httpx: well known modules, better
> maintained, more secure, support H
On 06/02/2022 15.08, Victor Stinner wrote:
Hi,
I propose to deprecate the urllib module in Python 3.11. It would emit
a DeprecationWarning which warn users, so users should consider better
alternatives like urllib3 or httpx: well known modules, better
maintained, more secure, support HTTP/2 (htt
That was just one example, here are others in the pip code base that
urllib.request is used for more than the pathname functions, they are all
vendored or tests but would still be disruptive to remove:
https://github.com/pypa/pip/blob/main/tests/lib/local_repos.py
https://github.com/pypa/pip/blob/
On Sun, Feb 06, 2022 at 03:08:40PM +0100, Victor Stinner wrote:
> I propose to deprecate the urllib module in Python 3.11. It would emit
> a DeprecationWarning which warn users, so users should consider better
> alternatives like urllib3 or httpx: well known modules, better
> maintained, more secu
On Sun, Feb 6, 2022 at 3:48 PM Damian Shaw wrote:
>
> Pip vendors requests for network calls:
> https://github.com/pypa/pip/tree/main/src/pip/_vendor/requests
>
> But still does depend on functions from urllib.parse and urllib.request in
> many places:
> https://github.com/pypa/pip/blob/main/sr
On Sun, Feb 6, 2022 at 3:33 PM Ezekiel Adetoro wrote:
> Hello,
> My name is Ezekiel, and it is my desire to start contributing to Python, be
> part of the core development of Python. I have forked the CPython and cloned
> it. What is the next step I need to do?
Welcome Ezekiel! I suggest you to
On 2022-02-06 13:18, Ezekiel Adetoro wrote:
Hello,
My name is Ezekiel, and it is my desire to start contributing to Python, be
part of the core development of Python. I have forked the CPython and cloned
it. What is the next step I need to do?
Look on the issue tracker for a bug that you can
Pip vendors requests for network calls:
https://github.com/pypa/pip/tree/main/src/pip/_vendor/requests
But still does depend on functions from urllib.parse and urllib.request in
many places:
https://github.com/pypa/pip/blob/main/src/pip/_internal/utils/urls.py
Damian (he/him)
On Sun, Feb 6, 2022
Speaking from anecdotal experience, "urllib.parse" is a very popular and
highly depended on module, I would be shocked if removing it wouldn't be
very disruptive.
In fact a quick search of the replacement modules you mention see that they
all rely it on it, here is an example from each:
* requests
Strong -1 from me.
urllib.request may not be "best practice", but it's still extremely
useful for simple situations, and urllib.parse is useful for basic
handling of URLs.Yes, the more complex aspects of urllib are better
handled by external packages, but that's not sufficient argument for
removin
I am not an expert about pip,
but it will be not a problem about installing the pip module once CPython
removes urllib module from stdlib?
Warm regards,
Dong-hee
2022년 2월 6일 (일) 오후 11:13, Victor Stinner 님이 작성:
> Hi,
>
> I propose to deprecate the urllib module in Python 3.11. It would emit
> a D
Hello,
My name is Ezekiel, and it is my desire to start contributing to Python, be
part of the core development of Python. I have forked the CPython and cloned
it. What is the next step I need to do?
___
Python-Dev mailing list -- python-dev@python.org
Hi,
I propose to deprecate the urllib module in Python 3.11. It would emit
a DeprecationWarning which warn users, so users should consider better
alternatives like urllib3 or httpx: well known modules, better
maintained, more secure, support HTTP/2 (httpx), etc.
I don't propose to schedule its re
19 matches
Mail list logo
