[Python-Dev] Should urlencode() sort the query parameters (if they come from a dict)?

Sat Aug 18 14:01:03 CEST 2012

On 18 August 2012 02:23, Stephen J. Turnbull <stephen at xemacs.org> wrote:
> Joao S. O. Bueno writes:
>> > I don't think this behavior is only desirable to unit tests: having
> > URL's been formed in predictable way a good thing in any way one
> > thinks about it.
>> Especially if you're a hacker. One more thing you may be able to use
> against careless sites that don't expect the unexpected to occur in
> URLs.
>> I'm not saying this is a bad thing, but we should remember that the
> whole point of PYTHONHASHSEED is that regularities can be exploited
> for devious and malicious purposes, and reducing regularity makes many
> attacks more difficult. "*Any* way one thinks about it" is far too
> strong a claim.

Ageeded that "any way one thinks about it" is far too strong a claim -
but I still hold to the point. Maybe "most ways one thinks about it"
:-) .

>> Steve
>>>>