]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashe...
authorSerhiy Storchaka <storchaka@gmail.com>
Sat, 17 Aug 2024 13:30:52 +0000 (16:30 +0300)
committerGitHub <noreply@github.com>
Sat, 17 Aug 2024 13:30:52 +0000 (16:30 +0300)
commit44e458357fca05ca0ae2658d62c8c595b048b5ef
tree768f7f526ee50f37b70b8545891b27b0496c4117
parentd60b97a833fd3284f2ee249d32c97fc359d83486
gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075)

This fixes CVE-2024-7592.
Lib/http/cookies.py
Lib/test/test_http_cookies.py
Misc/NEWS.d/next/Library/2024-08-16-19-13-21.gh-issue-123067.Nx9O4R.rst [new file with mode: 0644]