Skip to content

feat: FT197 urllib.parse — URL 解析・エンコード・クエリ文字列処理 (#545)#546

Merged
hideyukiMORI merged 1 commit into
mainfrom
feat/ft197-urllib-parse
May 22, 2026
Merged

feat: FT197 urllib.parse — URL 解析・エンコード・クエリ文字列処理 (#545)#546
hideyukiMORI merged 1 commit into
mainfrom
feat/ft197-urllib-parse

Conversation

@hideyukiMORI
Copy link
Copy Markdown
Owner

Summary

  • FT197 urllib.parse モジュールのフィールドトライアルを実施(28 tests passed)
  • ParsedUrl.is_allowed_scheme による SSRF 防御の第一門番パターンを実装
  • 診断・ペンテストなし(197 % 3 = 2, 197 % 4 = 1)
  • 主な観察: urljoin の末尾スラッシュ依存動作、parse_qs vs parse_qsl の使い分け、quote vs quote_plus の差異

Test plan

  • uv run pytest — 385 passed
  • uv run mypy src/ — no issues
  • uv run ruff check src/ tests/ — all passed
  • uv run pip-audit — no known vulnerabilities

🤖 Generated with Claude Code

- urllib.parse モジュール(urlparse/urljoin/quote/parse_qsl)のフィールドトライアルを実施
- ParsedUrl に is_allowed_scheme フラグを追加(SSRF 防御の第一門番)
- F-1: parse_qs vs parse_qsl の使い分けを FT レポートに記録
- F-3: urljoin の末尾スラッシュ依存動作を観察・テストで文書化
- pyproject.toml v1.8.68 → v1.8.69

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@hideyukiMORI hideyukiMORI merged commit bef58b9 into main May 22, 2026
2 checks passed
@hideyukiMORI hideyukiMORI deleted the feat/ft197-urllib-parse branch May 22, 2026 05:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant