Alternatively

Posted Jun 27, 2024 15:45 UTC (Thu) by flussence (guest, #85566)
In reply to: Alternatively by khim
Parent article: Python grapples with Apple App Store rejections

This is a general purpose URL parser. Saying it should not recognise an URL pattern used by a malevolent actor is like saying tzdata should delete timezones only used in "bad" countries.

Anyway there's a really simple workaround for this. Simply ship the source file in EBCDIC. The type of whiteboard-interview weenies who come up with and enforce these restrictions will not be smart enough to figure that one out.

Alternatively

Posted Jun 27, 2024 16:28 UTC (Thu) by notriddle (subscriber, #130608) [Link]

> This is a general purpose URL parser.

Other general-purpose URL parsers don't special-case this scheme. Both URL specs have support for schemes that are unknown to the parser, and neither https://url.spec.whatwg.org/#special-scheme nor https://datatracker.ietf.org/doc/html/rfc1738#section-3 includes itms-services in their lists.