]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.14] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212) (#148342)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 21 Apr 2026 07:49:37 +0000 (09:49 +0200)
committerGitHub <noreply@github.com>
Tue, 21 Apr 2026 07:49:37 +0000 (10:49 +0300)
commitb1cf9016335cb637c5a425032e8274a224f4b2ed
treebb70f7dde710d7b7aec6fdcfa68e3736f4b9e081
parentc235654cba26a4f538256842cec8ff1fa9f22331
[3.14] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212) (#148342)

gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212)
(cherry picked from commit 05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69)

Co-authored-by: Seth Larson <seth@python.org>
Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
Lib/http/client.py
Lib/test/test_httplib.py
Misc/NEWS.d/next/Security/2026-03-20-09-29-42.gh-issue-146211.PQVbs7.rst [new file with mode: 0644]