Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

[3.13] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917)#143973

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
gpshead merged 1 commit intopython:3.13fromgpshead:backport-f7fceed-3.13
Jan 17, 2026

Conversation

@gpshead
Copy link
Member

(cherry picked from commitf7fceed)

…pythonGH-143917)* Add 'test.support' fixture for C0 control characters*pythongh-143916: Reject control characters in wsgiref.headers.Headers(cherry picked from commitf7fceed)
@gpsheadgpshead added needs backport to 3.10only security fixes needs backport to 3.11only security fixes needs backport to 3.12only security fixes labelsJan 17, 2026
@gpsheadgpshead changed the title[3.13] gh-143916: Reject control characters in wsgiref.headers.Headers[3.13] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917)Jan 17, 2026
@bedevere-appbedevere-appbot added the type-securityA security issue labelJan 17, 2026
@gpsheadgpsheadenabled auto-merge (squash)January 17, 2026 18:04
@gpsheadgpshead merged commit22e4d55 intopython:3.13Jan 17, 2026
45 of 46 checks passed
@miss-islington-app
Copy link

Thanks@gpshead for the PR 🌮🎉.. I'm working now to backport this PR to: 3.10, 3.11, 3.12.
🐍🍒⛏🤖

@miss-islington-app
Copy link

Sorry,@gpshead, I could not cleanly backport this to3.12 due to a conflict.
Please backport usingcherry_picker on command line.

cherry_picker 22e4d55285cee52bc4dbe061324e5f30bd4dee58 3.12

@miss-islington-app
Copy link

Sorry,@gpshead, I could not cleanly backport this to3.11 due to a conflict.
Please backport usingcherry_picker on command line.

cherry_picker 22e4d55285cee52bc4dbe061324e5f30bd4dee58 3.11

@miss-islington-app
Copy link

Sorry,@gpshead, I could not cleanly backport this to3.10 due to a conflict.
Please backport usingcherry_picker on command line.

cherry_picker 22e4d55285cee52bc4dbe061324e5f30bd4dee58 3.10

@bedevere-app
Copy link

GH-143974 is a backport of this pull request to the3.12 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.12only security fixes labelJan 17, 2026
gpshead added a commit to gpshead/cpython that referenced this pull requestJan 17, 2026
…Headers (pythonGH-143917) (pythonGH-143973)pythongh-143916: Reject control characters in wsgiref.headers.Headers  (pythonGH-143917)* Add 'test.support' fixture for C0 control characters*pythongh-143916: Reject control characters in wsgiref.headers.Headers(cherry picked from commitf7fceed)(cherry picked from commit22e4d55)Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>Co-authored-by: Seth Michael Larson <seth@python.org>
gpshead added a commit to gpshead/cpython that referenced this pull requestJan 17, 2026
…Headers (pythonGH-143917) (pythonGH-143973)pythongh-143916: Reject control characters in wsgiref.headers.Headers  (pythonGH-143917)* Add 'test.support' fixture for C0 control characters*pythongh-143916: Reject control characters in wsgiref.headers.Headers(cherry picked from commitf7fceed)(cherry picked from commit22e4d55)Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>Co-authored-by: Seth Michael Larson <seth@python.org>
@bedevere-app
Copy link

GH-143975 is a backport of this pull request to the3.11 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.11only security fixes labelJan 17, 2026
gpshead added a commit to gpshead/cpython that referenced this pull requestJan 17, 2026
…Headers (pythonGH-143917) (pythonGH-143973)pythongh-143916: Reject control characters in wsgiref.headers.Headers  (pythonGH-143917)* Add 'test.support' fixture for C0 control characters*pythongh-143916: Reject control characters in wsgiref.headers.Headers(cherry picked from commitf7fceed)(cherry picked from commit22e4d55)Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>Co-authored-by: Seth Michael Larson <seth@python.org>
@bedevere-app
Copy link

GH-143976 is a backport of this pull request to the3.10 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.10only security fixes labelJan 17, 2026
Yhg1s pushed a commit that referenced this pull requestJan 19, 2026
GH-143917) (GH-143973) (#143974)* Add 'test.support' fixture for C0 control characters*gh-143916: Reject control characters in wsgiref.headers.Headers(cherry picked from commitf7fceed)(cherry picked from commit22e4d55)Co-authored-by: Seth Michael Larson <seth@python.org>
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

@gpsheadgpshead

Labels

type-securityA security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@gpshead@sethmlarson
[8]ページ先頭
©2009-2026 Movatter.jp