[2.7] closes bpo-38576: Disallow control characters in hostnames in http.client.#19052
[2.7] closes bpo-38576: Disallow control characters in hostnames in http.client.#19052benjaminp merged 4 commits intopython:2.7from mcepl:bpo30458_CRLF_injection_via_host_part
Conversation
…H-18995) Add host validation for control characters for more CVE-2019-18348 protection. (cherry picked from commit 83fc701) Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>
|
The tests seem to be broken. |
|
@benjaminp I am sorry, this has been fixed now. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Add host validation for control characters for more
CVE-2019-18348 protection.
(cherry picked from commit 83fc701)
Co-authored-by: Ashwin Ramaswami aramaswamis@gmail.com
https://bugs.python.org/issue38576