]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6b6756f) | patch
bpo-38576: Disallow control characters in hostnames in http.client (GH-18995) (GH...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sat, 14 Mar 2020 22:35:52 +0000 (15:35 -0700)
committerGitHub <noreply@github.com>
Sat, 14 Mar 2020 22:35:52 +0000 (18:35 -0400)
commit83fc70159b24f5b11a5ef87c9b05c2cf4c7faeba
tree6fc01adf47639d9ff592409882f6fabee3a549aatree | snapshot
parent6b6756f1283a87091c6186e70b544d4789e12c51commit | diff
bpo-38576: Disallow control characters in hostnames in http.client (GH-18995) (GH-19002)

Add host validation for control characters for more CVE-2019-18348 protection.
(cherry picked from commit 9165addc22d05e776a54319a8531ebd0b2fe01ef)

Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>
Lib/http/client.py diff | blob | blame | history
Lib/test/test_httplib.py diff | blob | blame | history
Lib/test/test_urllib.py diff | blob | blame | history
Misc/NEWS.d/next/Security/2020-03-14-14-57-44.bpo-38576.OowwQn.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git