]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 249706c) | patch
[2.7] closes bpo-38576: Disallow control characters in hostnames in http.client....
authorMatěj Cepl <mcepl@cepl.eu>
Thu, 19 Mar 2020 01:35:44 +0000 (02:35 +0100)
committerGitHub <noreply@github.com>
Thu, 19 Mar 2020 01:35:44 +0000 (20:35 -0500)
commite176e0c105786e9f476758eb5438c57223b65e7f
tree7fd7ffc7f2540b61f8d38fe3763321f647c314adtree | snapshot
parent249706c1fbce04125d81bd9993e6c010ae30f8e4commit | diff
[2.7] closes bpo-38576: Disallow control characters in hostnames in http.client. (GH-19052)

Add host validation for control characters for more
CVE-2019-18348 protection.
(cherry picked from commit 83fc70159b24)

Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>
Lib/httplib.py diff | blob | blame | history
Lib/test/test_httplib.py diff | blob | blame | history
Lib/test/test_urllib2.py diff | blob | blame | history
Misc/NEWS.d/next/Library/2020-03-18-01-30-50.bpo-38576.cvI68q.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git