django__django-10097

Make URLValidator reject invalid characters in the username and password

Verdict: disputed: one of the two checks found quoted evidence (not counted as a flag).

Since #20003, core.validators.URLValidator accepts URLs with usernames and passwords.

Disputed: one of the two checks found a pointer to the fix, the other found nothing. Not counted as a flag; the quote is on the task page. The issue text links the pull request that is the fix.

All SWE-bench Verified tasks · more django/django tasks · How the check works