cpython/Lib/wsgiref
Miss Islington (bot) 89b69db17a
[3.14] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371) (#145586)
gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371)

Disallow usage of control characters in status in wsgiref.handlers
to prevent HTTP header injections.
(cherry picked from commit d931725bc8)

Co-authored-by: Benedikt Johannes <benedikt.johannes.hofer@gmail.com>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Victor Stinner <vstinner@python.org>
2026-03-06 12:48:44 +00:00
..
__init__.py gh-86178: Add wsgiref.types (GH-32335) 2022-04-16 10:37:58 -07:00
handlers.py [3.14] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371) (#145586) 2026-03-06 12:48:44 +00:00
headers.py [3.14] gh-143916: Allow HTAB in wsgiref header values (#144761) 2026-02-21 14:14:51 +02:00
simple_server.py gh-66425: Remove the unreachable code to set REMOTE_HOST header (gh-111441) 2023-10-29 13:56:15 +09:00
types.py gh-95105: Return Iterator from wsgiref.types.InputStream.__iter__ (#95106) 2022-07-21 13:26:04 -07:00
util.py gh-111768: Add wsgiref.util.is_hop_by_hop to __all__ (#111770) 2023-11-08 15:29:47 +00:00
validate.py bpo-45975: Simplify some while-loops with walrus operator (GH-29347) 2022-11-26 14:33:25 -08:00