]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d3b6faf) | patch
gh-144370: Disallow usage of control characters in status in wsgiref.handlers for...
authorBenedikt Johannes <benedikt.johannes.hofer@gmail.com>
Fri, 6 Mar 2026 12:22:21 +0000 (13:22 +0100)
committerGitHub <noreply@github.com>
Fri, 6 Mar 2026 12:22:21 +0000 (13:22 +0100)
commitd931725bc850cd096f6703bc285e885f1e015f05
tree86c8107c9bad4d64e62139ee73744305c1c66deatree | snapshot
parentd3b6faf9758dce236d45c708a450437cdc3e97cdcommit | diff
gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (#144371)

Disallow usage of control characters in status in wsgiref.handlers
to prevent HTTP header injections.

Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Victor Stinner <vstinner@python.org>
Lib/test/test_wsgiref.py diff | blob | blame | history
Lib/wsgiref/handlers.py diff | blob | blame | history
Misc/ACKS diff | blob | blame | history
Misc/NEWS.d/next/Security/2026-01-31-21-56-54.gh-issue-144370.fp9m8t.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git