TLDR Dev · MISCELLANEOUS

WHEN STR.LOWER() IS A SECURITY VULNERABILITY IN PYTHON

sethmlarson.dev3 min read

Summary from the TLDR Dev newsletter

The use of `str.lower()` in Python's StringPrep implementation poses a security vulnerability due to its reliance on the Unicode data version that comes with the Python interpreter. The recent remediation involves creating new exceptions to align `str.lower()`'s behavior with Unicode 3.2.0.