cpython/Lib/http
Miss Islington (bot) b1cf901633
[3.14] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212) (#148342)
gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212)
(cherry picked from commit 05ed7ce7ae)

Co-authored-by: Seth Larson <seth@python.org>
Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
2026-04-21 10:49:37 +03:00
..
__init__.py gh-129408: http: Fix typo 'RFF' to RFC' in documentation (#129411) 2025-01-28 13:25:51 -05:00
client.py [3.14] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212) (#148342) 2026-04-21 10:49:37 +03:00
cookiejar.py gh-130631: Make join_header_words() more similar to the original Perl version (GH-130632) 2025-04-09 11:08:04 +03:00
cookies.py [3.14] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600) (#146023) 2026-03-16 14:13:19 +00:00
server.py [3.14] gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-142216) 2025-12-05 16:20:23 +02:00