]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.10] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146… (#148350)
authorSeth Larson <seth@python.org>
Sat, 27 Jun 2026 17:59:15 +0000 (12:59 -0500)
committerGitHub <noreply@github.com>
Sat, 27 Jun 2026 17:59:15 +0000 (19:59 +0200)
commit58703ec1bdd1eb075e8b01a0c427683ce594dd3e
treee54238bd1535cc7c5a267a8596a5d1d2eb10efd1
parent2bbcf3fb7a420a05605576c0f9468d4675381b5f
[3.10] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146… (#148350)

[3.10] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212)
(cherry picked from commit 05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69)

Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
Lib/http/client.py
Lib/test/test_httplib.py
Misc/NEWS.d/next/Security/2026-03-20-09-29-42.gh-issue-146211.PQVbs7.rst [new file with mode: 0644]