[3.6] bpo-42967: only use '&' as a query string separator (GH-24297) #24532

Merged

ned-deily merged 3 commits intopython:3.6from

orsenthil:backport-fcbe0cb-3.6

Feb 15, 2021

Commits on Feb 15, 2021

bpo-42967: [security] Address a web cache-poisoning issue reported in urllib.parse.parse_qsl().

AdamGold
authored and
orsenthil
committed
Fix the parse_multipart call.
orsenthil
committed
fix docs and make logic clearer
Fidget-Spinner
committed