Ticket #16395: urlize_malformed_urls-2.diff

django/utils/html.py

@@ -25 +25 @@
 html_gunk_re = re.compile(r'(?:<br clear="all">|<i><\/i>|<b><\/b>|<em><\/em>|<strong><\/strong>|<\/?smallcaps>|<\/?uppercase>)', re.IGNORECASE)
 hard_coded_bullets_re = re.compile(r'((?:<p>(?:%s).*?[a-zA-Z].*?</p>\s*)+)' % '|'.join([re.escape(x) for x in DOTS]), re.DOTALL)
 trailing_empty_content_re = re.compile(r'(?:<p>(?:&nbsp;|\s|<br \/>)*?</p>\s*)+\Z')
+http_begin_re = re.compile(r'^https?://\w')
 del x # Temporary variable
 
 def escape(html):
@@ -129 +130 @@
             # Make URL we want to point to.
             url = None
             if middle.startswith('http://') or middle.startswith('https://'):
-                url = urlquote(middle, safe='/&=:;#?+*')
+                if re.match(http_begin_re, middle):
+                    url = urlquote(middle, safe='/&=:;#?+*')
             elif middle.startswith('www.') or ('@' not in middle and \
                     middle and middle[0] in string.ascii_letters + string.digits and \
                     (middle.endswith('.org') or middle.endswith('.net') or middle.endswith('.com'))):

tests/regressiontests/defaultfilters/tests.py

@@ -217 +217 @@
         self.assertEqual(urlize('https://google.com'),
             u'<a href="https://google.com" rel="nofollow">https://google.com</a>')
 
+        # malformed URIs
+        self.assertEqual(urlize('http://///www.google.fr/?f=1'),
+            u'http://///www.google.fr/?f=1')
+        self.assertEqual(urlize('http://....google.com'),
+            u'http://....google.com')
+        self.assertEqual(urlize('https://..google.com'),
+            u'https://..google.com')
+
     def test_wordcount(self):
         self.assertEqual(wordcount(''), 0)
         self.assertEqual(wordcount(u'oneword'), 1)