]> git.ipfire.org Git - thirdparty/tornado.git/commit
projects / thirdparty / tornado.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5976db7) | patch
httputil: Forbid control chars and CR in header values 3489/head
authorBen Darnell <ben@bendarnell.com>
Sat, 26 Apr 2025 18:31:25 +0000 (14:31 -0400)
committerBen Darnell <ben@bendarnell.com>
Sat, 26 Apr 2025 18:31:25 +0000 (14:31 -0400)
commit4bdd0bc63d363b844c7b5471488fe45c6fefa471
treeb830cbaa04b11954e04632fdeb88c2a85962db96tree | snapshot
parent5976db7db6796ea75bfaec9d620b4ba3ff6f2023commit | diff
httputil: Forbid control chars and CR in header values

NUL, CR, and other control characters are not allowed in HTTP header
values.

Fixes #3481
tornado/httputil.py diff | blob | blame | history
tornado/test/httputil_test.py diff | blob | blame | history
Mirror of https://github.com/tornadoweb/tornado.git