delta/cpython-git.git/Lib/test/test_httplib.py, branch 3.6 github.com: python/cpython.git bpo-44022: Improve the regression test. (GH-26503) (GH-26508) 2021-06-03T04:38:31+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2021-06-03T04:38:31+00:00 1b6f4e5e13ebd1f957b47f7415b53d0869bdbac6 It wasn't actually detecting the regression due to the assertion being too lenient. (cherry picked from commit e60ab843cbb016fb6ff8b4f418641ac05a9b2fcc) Co-authored-by: Gregory P. Smith <greg@krypto.org> 
It wasn't actually detecting the regression due to the
assertion being too lenient.
(cherry picked from commit e60ab843cbb016fb6ff8b4f418641ac05a9b2fcc)

Co-authored-by: Gregory P. Smith <greg@krypto.org>
bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916) (GH-25935) 2021-05-06T17:05:37+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2021-05-06T17:05:37+00:00 f68d2d69f1da56c2aea1293ecf93ab69a6010ad7 Fixes http.client potential denial of service where it could get stuck reading lines from a malicious server after a 100 Continue response. Co-authored-by: Gregory P. Smith <greg@krypto.org> (cherry picked from commit 47895e31b6f626bc6ce47d175fe9d43c1098909d) Co-authored-by: Gen Xu <xgbarry@gmail.com> 
Fixes http.client potential denial of service where it could get stuck reading lines from a malicious server after a 100 Continue response.

Co-authored-by: Gregory P. Smith <greg@krypto.org>
(cherry picked from commit 47895e31b6f626bc6ce47d175fe9d43c1098909d)

Co-authored-by: Gen Xu <xgbarry@gmail.com>
bpo-39603: Prevent header injection in http methods (GH-18485) (GH-21539) 2020-07-19T09:28:45+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2020-07-19T09:28:45+00:00 f02de961b9f19a5db0ead56305fe0057a78787ae reject control chars in http method in http.client.putrequest to prevent http header injection (cherry picked from commit 8ca8a2e8fb068863c1138f07e3098478ef8be12e) Co-authored-by: AMIR <31338382+amiremohamadi@users.noreply.github.com> 
reject control chars in http method in http.client.putrequest to prevent http header injection
(cherry picked from commit 8ca8a2e8fb068863c1138f07e3098478ef8be12e)

Co-authored-by: AMIR <31338382+amiremohamadi@users.noreply.github.com>
 bpo-38576: Disallow control characters in hostnames in http.client (GH-18995) (GH-19002) 2020-03-14T22:35:52+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2020-03-14T22:35:52+00:00 83fc70159b24f5b11a5ef87c9b05c2cf4c7faeba Add host validation for control characters for more CVE-2019-18348 protection. (cherry picked from commit 9165addc22d05e776a54319a8531ebd0b2fe01ef) Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com> 
Add host validation for control characters for more CVE-2019-18348 protection.
(cherry picked from commit 9165addc22d05e776a54319a8531ebd0b2fe01ef)

Co-authored-by: Ashwin Ramaswami <aramaswamis@gmail.com>
 [3.6] bpo-38216, bpo-36274: Allow subclasses to separately override validation and encoding behavior (GH-16448) (GH-16462) 2019-09-28T16:44:12+00:00 Jason R. Coombs jaraco@jaraco.com 2019-09-28T16:44:12+00:00 5b18ce60b432d1dfa6f6988be07dd55646201a9b (cherry picked from commit 7774d7831e8809795c64ce27f7df52674581d298) Co-authored-by: Jason R. Coombs <jaraco@jaraco.com> 
(cherry picked from commit 7774d7831e8809795c64ce27f7df52674581d298)

Co-authored-by: Jason R. Coombs <jaraco@jaraco.com>
 bpo-33365: print the header values beside the keys (GH-6611) 2018-06-19T13:52:44+00:00 Miss Islington (bot) 31488909+miss-islington@users.noreply.github.com 2018-06-19T13:52:44+00:00 34cd4821ed97639896f85bdf0c0d5c75b23f8a76 with debuglevel=1 only the header keys got printed. With this change the header values get printed as well and the single header entries get '\n' as a separator. (cherry picked from commit 936f03e7fafc28fd6fdfba11d162c776b89c0167) Co-authored-by: Marco Strigl <mstrigl@suse.com> 
with debuglevel=1 only the header keys got printed. With
this change the header values get printed as well and the single
header entries get '\n' as a separator.
(cherry picked from commit 936f03e7fafc28fd6fdfba11d162c776b89c0167)

Co-authored-by: Marco Strigl <mstrigl@suse.com>
 bpo-31518: Change TLS protocol for Debian (#3660) 2018-02-24T23:45:24+00:00 Christian Heimes christian@python.org 2018-02-24T23:45:24+00:00 aab225840360719516eca55a7a69cfee45aee2af Debian Unstable has disabled TLS 1.0 and 1.1 for SSLv23_METHOD(). Change TLS/SSL protocol of some tests to PROTOCOL_TLS or PROTOCOL_TLSv1_2 to make them pass on Debian. Signed-off-by: Christian Heimes <christian@python.org> 
Debian Unstable has disabled TLS 1.0 and 1.1 for SSLv23_METHOD(). Change
TLS/SSL protocol of some tests to PROTOCOL_TLS or PROTOCOL_TLSv1_2 to
make them pass on Debian.

Signed-off-by: Christian Heimes <christian@python.org>
 Issue #28394: Merge typo fixes from 3.5 into 3.6 2016-10-10T00:28:38+00:00 Martin Panter vadmium+py@gmail.com 2016-10-10T00:28:38+00:00 fd1df3fef2ebe334e5a58e9e6e35dbd77d0a34ca 






Issue #28394: Spelling and typo fixes in code comments and changelog
2016-10-10T00:24:34+00:00

Martin Panter
vadmium+py@gmail.com

2016-10-10T00:24:34+00:00

d2a584b47b30f2e8189730201c4d19d51cdd0e89

Includes patch by Ville Skyttä.





Includes patch by Ville Skyttä.







Issue 28022: Catch deprecation warning in test_httplib, reported by Martin Panter
2016-09-11T17:54:43+00:00

Christian Heimes
christian@python.org

2016-09-11T17:54:43+00:00

8d14abc800df6fbfdfcaa5555dd501fc4507a846