git.ipfire.org Git - thirdparty/Python/cpython.git/commit

[3.13] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371) (#145585)

gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371)

Disallow usage of control characters in status in wsgiref.handlers
to prevent HTTP header injections.
(cherry picked from commit d931725bc850cd096f6703bc285e885f1e015f05)

Co-authored-by: Benedikt Johannes <benedikt.johannes.hofer@gmail.com>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Victor Stinner <vstinner@python.org>

author	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
	Fri, 6 Mar 2026 12:45:34 +0000 (13:45 +0100)
committer	GitHub <noreply@github.com>
	Fri, 6 Mar 2026 12:45:34 +0000 (12:45 +0000)
commit	5db017755b261281aec661a7c1578b46b2a18565
tree	368c7f7da57c9b985ed800fad4f72502c4051a04	tree \| snapshot
parent	0021149a3a7bece0c8295eb252b103784a1872a3	commit \| diff

Lib/test/test_wsgiref.py		diff \| blob \| blame \| history
Lib/wsgiref/handlers.py		diff \| blob \| blame \| history
Misc/ACKS		diff \| blob \| blame \| history
Misc/NEWS.d/next/Security/2026-01-31-21-56-54.gh-issue-144370.fp9m8t.rst	[new file with mode: 0644]	blob