diff options
| author | AMIR <31338382+amiremohamadi@users.noreply.github.com> | 2020-07-19 00:46:10 +0430 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2020-09-30 16:36:00 +0200 |
| commit | 2da5f0eb5fbcde721fef36ff7e9d1f67c18bcdf7 (patch) | |
| tree | 85e15a18236c0c0b1f1c88108d3cc779c314b396 /Lib/toaiff.py | |
| parent | fcc4a585fe13a8920fdb1f1d1ddf04eaed0025eb (diff) | |
| download | cpython-git-fedora-2.7.tar.gz | |
00354-cve-2020-26116-http-request-method-crlf-injection-in-httplib.patchfedora-2.7.18-6fedora-2.7
00354 #
Reject control chars in HTTP method in httplib.putrequest to prevent
HTTP header injection
Backported from Python 3.5-3.10 (and adjusted for py2's single-module httplib):
- https://bugs.python.org/issue39603
- https://github.com/python/cpython/pull/18485 (3.10)
- https://github.com/python/cpython/pull/21946 (3.5)
Co-authored-by: AMIR <31338382+amiremohamadi@users.noreply.github.com>
Diffstat (limited to 'Lib/toaiff.py')
0 files changed, 0 insertions, 0 deletions