]> git.ipfire.org Git - thirdparty/tornado.git/commit
httputil: Process the Host header more strictly 3487/head
authorBen Darnell <ben@bendarnell.com>
Fri, 25 Apr 2025 18:08:18 +0000 (14:08 -0400)
committerBen Darnell <ben@bendarnell.com>
Fri, 25 Apr 2025 18:08:18 +0000 (14:08 -0400)
commit4ce700affdd23631a0514d1a0460c0854b0687fe
tree4d89e90c3e1c3ee46981b5e95633fc56c3b0a182
parent1161f9b0cb15bf9681f89a76778b8a44835fcccc
httputil: Process the Host header more strictly

- It is now an error to have multiple Host headers
- The Host header is now mandatory except in HTTP/1.0 mode
- Host headers containing characters that are disallowed by RFC 3986
  are now rejected

Fixes #3468
tornado/httputil.py
tornado/test/httpserver_test.py
tornado/test/web_test.py