]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6672c16) | patch
bpo-38576: Disallow control characters in hostnames in http.client (GH-18995)
authorAshwin Ramaswami <aramaswamis@gmail.com>
Sat, 14 Mar 2020 18:56:06 +0000 (14:56 -0400)
committerGitHub <noreply@github.com>
Sat, 14 Mar 2020 18:56:06 +0000 (11:56 -0700)
commit9165addc22d05e776a54319a8531ebd0b2fe01ef
tree288869da768bf6c9c5c930bf50e58a36114b04e6tree | snapshot
parent6672c16b1d7f83789bf3a2016bd19edfd3568e71commit | diff
bpo-38576: Disallow control characters in hostnames in http.client (GH-18995)

Add host validation for control characters for more CVE-2019-18348 protection.
Lib/http/client.py diff | blob | blame | history
Lib/test/test_httplib.py diff | blob | blame | history
Lib/test/test_urllib.py diff | blob | blame | history
Misc/NEWS.d/next/Security/2020-03-14-14-57-44.bpo-38576.OowwQn.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git