]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.10] gh-143919: Reject control characters in http cookies (#144094)
authorSeth Michael Larson <seth@python.org>
Sun, 25 Jan 2026 17:05:23 +0000 (11:05 -0600)
committerGitHub <noreply@github.com>
Sun, 25 Jan 2026 17:05:23 +0000 (17:05 +0000)
commit7852d72b653fea0199acf5fc2a84f6f8b84eba8d
tree3a9e92f31de9c2e70d349bccab74e479ba54df7e
parent34d76b00dabde81a793bd06dd8ecb057838c4b38
[3.10] gh-143919: Reject control characters in http cookies (#144094)

(cherry picked from commit 95746b3a13a985787ef53b977129041971ed7f70)

Co-authored-by: Bartosz Sławecki <bartosz@ilikepython.com>
Co-authored-by: sobolevn <mail@sobolevn.me>
Doc/library/http.cookies.rst
Lib/http/cookies.py
Lib/test/test_http_cookies.py
Misc/NEWS.d/next/Security/2026-01-16-11-13-15.gh-issue-143919.kchwZV.rst [new file with mode: 0644]