修改了CVE代码
使用了 Prepared Requests,因为 python3 requests 模块会规范化URL中的 ../,例如:
代码如下:
r = requests.get("http://123.123.123.123/../../../../../../test")
print(str(r.status_code))
结果如下:
GET /test HTTP/1.1
Host: 123.123.123.123
Connection: close
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.22.0