]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-39603: Prevent header injection in http methods (GH-18485)
authorAMIR <31338382+amiremohamadi@users.noreply.github.com>
Sat, 18 Jul 2020 20:16:10 +0000 (00:46 +0430)
committerGitHub <noreply@github.com>
Sat, 18 Jul 2020 20:16:10 +0000 (13:16 -0700)
commit8ca8a2e8fb068863c1138f07e3098478ef8be12e
treebd8512b01b0ce918d4678c0c848418a4ab3f00a1
parent9b01c598ca2576a1056816e85dd84bf5f9c74688
bpo-39603: Prevent header injection in http methods (GH-18485)

reject control chars in http method in http.client.putrequest to prevent http header injection
Lib/http/client.py
Lib/test/test_httplib.py
Misc/NEWS.d/next/Security/2020-02-12-14-17-39.bpo-39603.Gt3RSg.rst [new file with mode: 0644]