cpython/Lib/wsgiref
Miss Islington (bot) 5db017755b
[3.13] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371) (#145585)
gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371)

Disallow usage of control characters in status in wsgiref.handlers
to prevent HTTP header injections.
(cherry picked from commit d931725bc8)

Co-authored-by: Benedikt Johannes <benedikt.johannes.hofer@gmail.com>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Victor Stinner <vstinner@python.org>
2026-03-06 12:45:34 +00:00
..
__init__.py gh-86178: Add wsgiref.types (GH-32335) 2022-04-16 10:37:58 -07:00
handlers.py [3.13] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (GH-144371) (#145585) 2026-03-06 12:45:34 +00:00
headers.py [3.13] gh-143916: Allow HTAB in wsgiref header values (GH-144762) 2026-02-23 14:38:04 +01:00
simple_server.py gh-66425: Remove the unreachable code to set REMOTE_HOST header (gh-111441) 2023-10-29 13:56:15 +09:00
types.py gh-95105: Return Iterator from wsgiref.types.InputStream.__iter__ (#95106) 2022-07-21 13:26:04 -07:00
util.py gh-111768: Add wsgiref.util.is_hop_by_hop to __all__ (#111770) 2023-11-08 15:29:47 +00:00
validate.py bpo-45975: Simplify some while-loops with walrus operator (GH-29347) 2022-11-26 14:33:25 -08:00