delta/cpython-git.git/Lib/http, branch 3.4

[3.4] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (#12279)

2019-03-16T22:56:34+00:00

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe5063593958e5efdf90f068582837f07bd14)

Co-authored-by: Xtreak

bpo-35647: Fix path check in cookiejar (#11436) (#12278)

2019-03-16T22:54:03+00:00

* Refactor cookie path check as per RFC 6265

* Add tests for prefix match of path

* Add news entry

* Fix set_ok_path and refactor tests

* Use slice for last letter

(cherry picked from commit 0e1f1f01058bd4a9b98cfe443214adecc019a38c)

bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782)

2017-07-12T12:52:04+00:00

Based on patch by Philipp Hagemeister.  This fixes a regression caused by
revision f4377699fd47.

(cherry picked from commit d274b3f1f1e2d8811733fb952c9f18d7da3a376a)

Correct Content-Type syntax in documentation

2015-11-14T00:58:32+00:00

Issue #25523: Further a-to-an corrections.

2015-11-02T12:10:23+00:00

Various minor typos in documentation and comments

2015-10-07T10:26:23+00:00

Issue #24657: Prevent CGIRequestHandler from collapsing the URL query

2015-10-03T05:55:46+00:00

Initial patch from Xiang Zhang. Also fix out-of-date _url_collapse_path() doc
string.

Issue #25232: Fix CGIRequestHandler's splitting of URL query

2015-10-03T05:38:07+00:00

Patch from Xiang Zhang.

Issue #24774: Fix docstring in http.server.test.

2015-08-17T00:18:35+00:00

Patch from Chiu-Hsiang Hsu.

Issue #23888: Handle fractional time in cookie expiry. Patch by ssh.

2015-08-03T22:06:29+00:00