cpython/Lib/http
Miss Islington (bot) 289f29b0fe
[3.13] gh-119451: Fix a potential denial of service in http.client (GH-119454) (#142139)
gh-119451: Fix a potential denial of service in http.client (GH-119454)

Reading the whole body of the HTTP response could cause OOM if
the Content-Length value is too large even if the server does not send
a large amount of data. Now the HTTP client reads large data by chunks,
therefore the amount of consumed memory is proportional to the amount
of sent data.
(cherry picked from commit 5a4c4a033a)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
2025-12-05 16:21:57 +01:00
..
__init__.py [3.13] gh-129408: http: Fix typo 'RFF' to RFC' in docstring (GH-129411) (#129414) 2025-01-28 18:48:51 +00:00
client.py [3.13] gh-119451: Fix a potential denial of service in http.client (GH-119454) (#142139) 2025-12-05 16:21:57 +01:00
cookiejar.py [3.13] gh-130631: Make join_header_words() more similar to the original Perl version (GH-130632) (GH-132303) 2025-04-09 09:18:31 +00:00
cookies.py [3.13] gh-123401: Fix http.cookies module to support obsolete RFC 850 date format (GH-123405) (#127828) 2024-12-11 15:38:09 +00:00
server.py [3.13] Revert "gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-119455) (GH-142130)" (#142185) 2025-12-02 12:04:25 +00:00