Attacker-controlled content via unclaimed documentation bucket

External-resource hijacking in Requests documentation allows remote attackers to serve content from a referenced S3 bucket. The docs/community/out-there.rst page embeds an audio URL under codeconf.s3.amazonaws.com even though the codeconf bucket was unclaimed, allowing the party that registered it to control the linked response. Exploitation requires a reader to follow the documentation link and encounter attacker-controlled content; the Requests runtime itself does not fetch the URL.