remove cases where intern is used. This will prevent a DoS via memory starvation...

diff --git a/tornado/httpserver.py b/tornado/httpserver.py
index 0f1d8e00f17d69203c6bbb4357b7b41779f746c0..6c85ff38a667f935c1a53c943cd13d95fdb7fb67 100644 (file)
--- a/tornado/httpserver.py
+++ b/tornado/httpserver.py
@@ -318,7 +318,7 @@ class HTTPHeaders(dict):
         return dict.__getitem__(self, self._normalize_name(name))
 
     def _normalize_name(self, name):
-        return intern("-".join([w.capitalize() for w in name.split("-")]))
+        return "-".join([w.capitalize() for w in name.split("-")])
 
     @classmethod
     def parse(cls, headers_string):

diff --git a/tornado/wsgi.py b/tornado/wsgi.py
index 714b08ed482e1b6e0c1ad3931261be5f703a7c64..15af00f783f4228d34e2f96d60e9ac71dd794180 100644 (file)
--- a/tornado/wsgi.py
+++ b/tornado/wsgi.py
@@ -187,4 +187,4 @@ class HTTPHeaders(dict):
         return dict.__getitem__(self, self._normalize_name(name))
 
     def _normalize_name(self, name):
-        return intern("-".join([w.capitalize() for w in name.split("-")]))
+        return "-".join([w.capitalize() for w in name.split("-")])