search

open-telemetry / opentelemetry-python-contrib

OpenTelemetry instrumentation for Python modules
https://opentelemetry.io
Apache License 2.0
703 stars 588 forks source link

Improper Input Validation in httpx #2405

Open naga2222 opened 5 months ago

naga2222 commented 5 months ago

Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copy_with.

whardier commented 5 months ago

I have also not been able to use extensions like typeguard.typechecked against RequestInfo and ResponseInfo since URL is expected to be a tuple. Modern versions of httpx do not use a tuple.

Curious what a good fixup might look like.