summaryrefslogtreecommitdiffstats
path: root/Lib/http
Commit message (Collapse)AuthorAgeFilesLines
* Lax cookie parsing in http.cookies could be a security issue when combinedAntoine Pitrou2014-09-161-1/+2
|\ | | | | | | | | | | with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov.
| * Lax cookie parsing in http.cookies could be a security issue when combinedAntoine Pitrou2014-09-161-1/+2
| |\ | | | | | | | | | | | | | | | with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov.
| | * Lax cookie parsing in http.cookies could be a security issue when combinedAntoine Pitrou2014-09-161-1/+2
| | | | | | | | | | | | | | | | | | with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov.
* | | Issue #22165: SimpleHTTPRequestHandler now supports undecodable file names.Serhiy Storchaka2014-08-171-4/+15
|\ \ \ | |/ /
| * | Issue #22165: SimpleHTTPRequestHandler now supports undecodable file names.Serhiy Storchaka2014-08-171-4/+15
| | |
* | | Issue #22033: Reprs of most Python implemened classes now contain actualSerhiy Storchaka2014-07-252-2/+3
| | | | | | | | | | | | class name instead of hardcoded one.
* | | Fixed bugs in reprs of CookieJar and multiprocessing.dummy.Value.Serhiy Storchaka2014-07-221-2/+2
|\ \ \ | |/ /
| * | Fixed bugs in reprs of CookieJar and multiprocessing.dummy.Value.Serhiy Storchaka2014-07-221-2/+2
| | |
* | | Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,Ned Deily2014-07-131-5/+5
|\ \ \ | |/ / | | | | | | broken by the fix for security issue #19435. Patch by Zach Byrne.
| * | Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,Ned Deily2014-07-131-5/+5
| |\ \ | | |/ | | | | | | broken by the fix for security issue #19435. Patch by Zach Byrne.
| | * Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,Ned Deily2014-07-131-5/+5
| | |\ | | | | | | | | | | | | broken by the fix for security issue #19435. Patch by Zach Byrne.
| | | * Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,Ned Deily2014-07-131-5/+5
| | | | | | | | | | | | | | | | broken by the fix for security issue #19435. Patch by Zach Byrne.
* | | | merge 3.4 (#21766)Benjamin Peterson2014-06-151-1/+1
|\ \ \ \ | |/ / /
| * | | merge 3.3 (#21766)Benjamin Peterson2014-06-151-1/+1
| |\ \ \ | | |/ /
| | * | merge 3.2 (#21766)Benjamin Peterson2014-06-151-1/+1
| | |\ \ | | | |/
| | | * url unquote the path before checking if it refers to a CGI script (closes ↵Benjamin Peterson2014-06-151-1/+1
| | | | | | | | | | | | | | | | #21766)
* | | | merge from 3.4Senthil Kumaran2014-04-141-24/+49
|\ \ \ \ | |/ / / | | | | | | | | | | | | Issue #7776: Fix ``Host:'' header and reconnection when using http.client.HTTPConnection.set_tunnel() Patch by Nikolaus Rath.
| * | | Issue #7776: Fix ``Host:'' header and reconnection when using ↵Senthil Kumaran2014-04-141-24/+49
| | | | | | | | | | | | | | | | | | | | | | | | http.client.HTTPConnection.set_tunnel(). Patch by Nikolaus Rath.
* | | | (Merge 3.4) Issue #20976: pyflakes: Remove unused importsVictor Stinner2014-03-202-3/+0
|\ \ \ \ | |/ / /
| * | | Issue #20976: pyflakes: Remove unused importsVictor Stinner2014-03-202-3/+0
| | | |
* | | | Issue #19009Kristján Valur Jónsson2014-03-191-57/+121
|/ / / | | | | | | | | | Enhance HTTPResponse.readline() performance
* | | Issue #20331: Fixed possible FD leaks in various modules:Serhiy Storchaka2014-01-251-9/+15
|\ \ \ | |/ / | | | | | | http.server, imghdr, mailcap, mimetypes, xml.etree.
| * | Issue #20331: Fixed possible FD leaks in various modules:Serhiy Storchaka2014-01-251-9/+15
| | | | | | | | | | | | http.server, imghdr, mailcap, mimetypes, xml.etree.
* | | merge 3.3 (#18574)Benjamin Peterson2014-01-191-1/+1
|\ \ \ | |/ /
| * | fix handling of 100-continue status code (closes #18574)Benjamin Peterson2014-01-191-1/+1
| | |
* | | Issue #19936: Added executable bits or shebang lines to Python scripts whichSerhiy Storchaka2014-01-161-3/+0
|\ \ \ | |/ / | | | | | | | | | | | | | | | requires them. Disable executable bits and shebang lines in test and benchmark files in order to prevent using a random system python, and in source files of modules which don't provide command line interface. Fixed shebang lines in the unittestgui and checkpip scripts.
| * | Issue #19936: Added executable bits or shebang lines to Python scripts whichSerhiy Storchaka2014-01-161-3/+0
| | | | | | | | | | | | | | | | | | | | | requires them. Disable executable bits and shebang lines in test and benchmark files in order to prevent using a random system python, and in source files of modules which don't provide command line interface. Fixed shebang line to use python3 executable in the unittestgui script.
* | | merge 3.3 (#20018)Benjamin Peterson2013-12-181-1/+1
|\ \ \ | |/ /
| * | update url to spec (closes #20018)Benjamin Peterson2013-12-181-1/+1
| | |
* | | Issue #20007: HTTPResponse.read(0) no more prematurely closes connection.Serhiy Storchaka2013-12-171-1/+1
|\ \ \ | |/ / | | | | | | Original patch by Simon Sapin.
| * | Issue #20007: HTTPResponse.read(0) no more prematurely closes connection.Serhiy Storchaka2013-12-171-1/+1
| | | | | | | | | | | | Original patch by Simon Sapin.
* | | Issue 19509: Don't call match_hostname() twice in http.client.Christian Heimes2013-12-051-6/+6
| | |
* | | Issue #19735: Implement private function ssl._create_stdlib_context() toChristian Heimes2013-11-231-3/+1
| | | | | | | | | | | | | | | create SSLContext objects in Python's stdlib module. It provides a single configuration point and makes use of SSLContext.load_default_certs().
* | | merge 3.3 (#19435)Benjamin Peterson2013-10-301-5/+4
|\ \ \ | |/ /
| * | merge 3.2 (#19435)Benjamin Peterson2013-10-301-5/+4
| |\ \ | | |/
| | * merge 3.1 (#19435)Benjamin Peterson2013-10-301-5/+4
| | |\
| | | * use the collapsed path in the run_cgi method (closes #19435)Benjamin Peterson2013-10-301-5/+4
| | | |
* | | | merge with 3.3Georg Brandl2013-10-271-0/+4
|\ \ \ \ | |/ / /
| * | | Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more thanGeorg Brandl2013-10-271-0/+4
| | | | | | | | | | | | | | | | 100 headers are read. Adapted from patch by Jyrki Pulliainen.
* | | | merge from 3.3Senthil Kumaran2013-09-301-1/+1
|\ \ \ \ | |/ / /
| * | | Minor code improvement. Review comment by Eric V. SmithSenthil Kumaran2013-09-301-1/+1
| | | |
* | | | Expose --bind argument for http.server, enable http.server to bind to a userSenthil Kumaran2013-09-151-5/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | specified network interface. Patch contributed by Malte Swart. Addresses issue #17764. HG :Enter commit message. Lines beginning with 'HG:' are removed.
* | | | Fix http.server's request handling case on trailing '/'.Senthil Kumaran2013-09-131-0/+4
|\ \ \ \ | |/ / / | | | | | | | | Patch contributed by Vajrasky Kok. Addresses Issue #17324
| * | | Fix http.server's request handling case on trailing '/'.Senthil Kumaran2013-09-131-0/+4
| | | | | | | | | | | | | | | | Patch contributed by Vajrasky Kok. Addresses Issue #17324
* | | | Merge #16611: BaseCookie now parses 'secure' and 'httponly' flags.R David Murray2013-08-251-10/+19
|\ \ \ \ | |/ / /
| * | | #16611: BaseCookie now parses 'secure' and 'httponly' flags.R David Murray2013-08-251-10/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously it generated them if they were given a value, but completely ignored them if they were present in the string passed in to be parsed. Now if the flag appears on a cookie, the corresponding Morsel key will reference a True value. Other pre-existing behavior is retained in this maintenance patch: if the source contains something like 'secure=foo', morsel['secure'] will return 'foo'. Since such a value doesn't round trip and never did (and would be a surprising occurrence) a subsequent non-bug-fix patch may change this behavior. Inspired by a patch from Julien Phalip, who reviewed this one.
* | | | Issue #18200: Back out usage of ModuleNotFoundError (8d28d44f3a9a)Brett Cannon2013-07-043-3/+3
| | | |
* | | | Issue #18200: Update the stdlib (except tests) to useBrett Cannon2013-06-143-3/+3
| | | | | | | | | | | | | | | | ModuleNotFoundError.
* | | | Issue #16658: add missing return to HTTPConnection.send().Andrew Svetlov2013-04-121-1/+1
|\ \ \ \ | |/ / / | | | | | | | | Patch by Jeff Knupp
| * | | Issue #16658: add missing return to HTTPConnection.send().Andrew Svetlov2013-04-121-1/+1
| | | | | | | | | | | | | | | | Patch by Jeff Knupp