]> git.ipfire.org Git - thirdparty/tornado.git/commit
httputil: Forbid control chars and CR in header values 3489/head
authorBen Darnell <ben@bendarnell.com>
Sat, 26 Apr 2025 18:31:25 +0000 (14:31 -0400)
committerBen Darnell <ben@bendarnell.com>
Sat, 26 Apr 2025 18:31:25 +0000 (14:31 -0400)
commit4bdd0bc63d363b844c7b5471488fe45c6fefa471
treeb830cbaa04b11954e04632fdeb88c2a85962db96
parent5976db7db6796ea75bfaec9d620b4ba3ff6f2023
httputil: Forbid control chars and CR in header values

NUL, CR, and other control characters are not allowed in HTTP header
values.

Fixes #3481
tornado/httputil.py
tornado/test/httputil_test.py