]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-146211: Reject CR/LF in HTTP tunnel request headers (#146212)
authorSeth Larson <seth@python.org>
Fri, 10 Apr 2026 15:21:42 +0000 (10:21 -0500)
committerGitHub <noreply@github.com>
Fri, 10 Apr 2026 15:21:42 +0000 (15:21 +0000)
commit05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69
tree758223616dee3444a9ee2e9fa19d605aed8110bb
parent266247c9a609f148a1e6abdec94ff5ad807b8557
gh-146211: Reject CR/LF in HTTP tunnel request headers (#146212)

Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
Lib/http/client.py
Lib/test/test_httplib.py
Misc/NEWS.d/next/Security/2026-03-20-09-29-42.gh-issue-146211.PQVbs7.rst [new file with mode: 0644]