diff options
| author | Ben Kallus <49924171+kenballus@users.noreply.github.com> | 2023-05-12 20:25:58 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-12 20:25:58 (GMT) |
| commit | cf720acfcbd8c9c25a706a4b6df136465a803992 (patch) | |
| tree | 5907abcc053c6355e63190ff0c2bc7124ca39225 /Misc | |
| parent | 25db95d224d18fb7b7f53165aeaa87632b0230f2 (diff) | |
| download | cpython-cf720acfcbd8c9c25a706a4b6df136465a803992.zip cpython-cf720acfcbd8c9c25a706a4b6df136465a803992.tar.gz cpython-cf720acfcbd8c9c25a706a4b6df136465a803992.tar.bz2 | |
gh-103204: `http.server` - Enforce that HTTP version numbers must consist only of digits (#103205)
Reject HTTP requests with invalid http/x.y version numbers: x or y being non-digits or too-long.
---------
Co-authored-by: Oleg Iarygin <oleg@arhadthedev.net>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS.d/next/Library/2023-04-02-23-05-22.gh-issue-103204.bbDmu0.rst | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Library/2023-04-02-23-05-22.gh-issue-103204.bbDmu0.rst b/Misc/NEWS.d/next/Library/2023-04-02-23-05-22.gh-issue-103204.bbDmu0.rst new file mode 100644 index 0000000..f8b3aa5 --- /dev/null +++ b/Misc/NEWS.d/next/Library/2023-04-02-23-05-22.gh-issue-103204.bbDmu0.rst @@ -0,0 +1,3 @@ +Fixes :mod:`http.server` accepting HTTP requests with HTTP version numbers +preceded by '+', or '-', or with digit-separating '_' characters. The length +of the version numbers is also constrained. |