id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
34380	"Make URLField assume ""https""."	Coen van der Kamp	Coen van der Kamp	"In `django.forms.fields.URLField.to_python` the assumption is made that the `http` (no S) is a good default scheme for URLs that do not specify a scheme when submitted.

Entering `example.com` in a URLField will give `http://example.com` as cleaned data.

Ref: https://github.com/django/django/blame/main/django/forms/fields.py#L772-L774

I think URLField should assume the safe option `https`.

I've notified the security team, and they didn't see this as a security issue."	Cleanup/optimization	closed	Forms	4.1	Normal	fixed			Ready for checkin	1	0	0	0	0	0