TLDR Dev · MISCELLANEOUS
WHEN STR.LOWER() IS A SECURITY VULNERABILITY IN PYTHON
Summary from the TLDR Dev newsletter
The use of `str.lower()` in Python's StringPrep implementation poses a security vulnerability due to its reliance on the Unicode data version that comes with the Python interpreter. The recent remediation involves creating new exceptions to align `str.lower()`'s behavior with Unicode 3.2.0.