URLDataTypeSerializer treats mixed-case HTTP(S) schemes as local paths
Maintainers usually reply within 2 days
@akhil9tiet is already working on this.
Since Nov 3, 2026.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 72/100
Research direction
Start at the URLDataTypeSerializer class and its case-sensitive prefix check that decides between URL and local path. Reproduce with the synthetic HTTPS://example.invalid/é?q=☃ value through hashing and add_seeds_to_memory_async on an in-memory SQLite memory. Done when http and https are matched case-insensitively, the original URL spelling is kept for the hash input, and local paths still behave as before.
Written by the indexing model from the issue text.
Description
Describe the bug
URLDataTypeSerializer uses a case-sensitive prefix check to decide whether a value is a URL or a local path. HTTPS://... and HtTp://... are valid HTTP(S) URLs, but are classified as files. Hashing and public seed ingestion then raise FileNotFoundError.
Steps/Code to Reproduce
Use a SQLiteMemory and URLDataTypeSerializer with the synthetic URL HTTPS://example.invalid/é?q=☃, then hash it or pass it to add_seeds_to_memory_async. No URL needs to be fetched.
Expected Results
Recognize http and https schemes case-insensitively while preserving the original URL spelling and hash input; continue handling local paths normally.
Actual Results
Lowercase https:// hashes and ingests successfully. Uppercase and mixed-case schemes set data_on_disk=true; both operations raise FileNotFoundError for the URL string treated as a path.
Screenshots
N/A. SDK and local SQLite reproduction; no external URL was fetched.
Versions
Linux; Python 3.12.3; PyRIT 1.2.0.dev0 at revision 01ce6ca66a315770b36c7dca1f320668c0d92d7c. Real SDK and in-memory SQLite; no network fetch or model call.
- Dominant language
- Python
- Stars
- 4.7k
- Forks
- 1k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 465
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- No Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from microsoft/PyRIT
-
Scenario objective previews can split supplementary Unicode during truncationPossibly taken @Aadithya-kl claimed this today. OpenBug: triage help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
microsoft/PyRIT#3870 · 1 comment ·
Maintainers usually reply within 2 days
-
Parameter required status is lost after wire round-tripPossibly taken @its-amann claimed this today. OpenBug: triage help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
microsoft/PyRIT#3854 · 1 comment ·
Maintainers usually reply within 2 days
-
BUG: LLMGenericTextConverter identifier changes between processes for set-valued template parametersOpenBug: triage
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Maintainers usually reply within 2 days
-
BUG: SelfAskGeneral scorers leave their output keys out of the identifierPossibly taken @Hrushikesh-ramilla claimed this 1 day ago. OpenBug: triage
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 2 days
-
GUI rejects valid empty-string SearchReplaceConverter settings, preventing deletion convertersPossibly taken @Darshika140 claimed this 2 days ago. Openhelp wanted
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
microsoft/PyRIT#3749 · 3 comments · 1 assignee ·
Maintainers usually reply within 2 days
Similar issues
-
Backend issue lists report in-patch warnings and out-of-patch errors as not publishablePossibly taken @RaphaelFakhri claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
mozilla/code-review#3794 ·
Maintainers usually reply within 1 day
-
[oblt-aw][autodoc] Update docs that still describe the security registry as emptyPossibly taken @github-actions claimed this today. Open
Difficulty 1/5 1-3 hours Newbie friendliness 85/100
Maintainers usually reply within 1 day
-
[Bug] adb backup script reports "Done" & exits 0 when the backup failsPossibly taken @bhattmanthan claimed this today. Openrequest-issue-assignment
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
OWASP/mastg#4034 · 5 comments ·
Maintainers usually reply within 1 day
-
agent-ui bug p2
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
correction metadata
Difficulty 1/5 Under an hour Newbie friendliness 72/100
acl-org/acl-anthology#10768 · 1 comment ·
Maintainers usually reply within 1 day