Add Direct URL security heading

No changes to the spec, just adding a heading to highlight the notes on avoiding credential leaks.
pypa · Aug 8, 2024 · 3d9aced · 3d9aced
1 parent caa2007
commit 3d9aced
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/source/specifications/direct-url-data-structure.rst b/source/specifications/direct-url-data-structure.rst
@@ -31,6 +31,9 @@ Depending on what ``url`` refers to, the second field MUST be one of ``vcs_info`
 local directory). These info fields have a (possibly empty) subdictionary as
 value, with the possible keys defined below.
 
+Security Considerations
+-----------------------
+
 When persisted, ``url`` MUST be stripped of any sensitive authentication information,
 for security reasons.