Skip to content

[3.12] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) (GH-143973)#143974

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
Yhg1s merged 1 commit into from
Jan 19, 2026
Merged

[3.12] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) (GH-143973) #143974

Yhg1s merged 1 commit into from
Jan 19, 2026

Conversation

@gpshead
Copy link
Member

@gpsheadgpshead commented Jan 17, 2026

gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917)

(cherry picked from commit f7fceed) (cherry picked from commit 22e4d55)

@gpshead@sethmlarson
[3.12]pythongh-143916: Reject control characters in wsgiref.headers.…
03a7342
…Headers (pythonGH-143917) (pythonGH-143973) pythongh-143916: Reject control characters in wsgiref.headers.Headers (pythonGH-143917) * Add 'test.support' fixture for C0 control characters * pythongh-143916: Reject control characters in wsgiref.headers.Headers (cherry picked from commit f7fceed) (cherry picked from commit 22e4d55) Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Seth Michael Larson <seth@python.org>
@bedevere-appbedevere-appbot mentioned this pull request Jan 17, 2026
Closed
@bedevere-appbedevere-appbot mentioned this pull request Jan 17, 2026
Merged
@gpsheadgpshead added needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes release-blocker and removed type-security A security issue needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes labels Jan 17, 2026
@gpsheadgpshead added the type-security A security issue label Jan 17, 2026
@Yhg1sYhg1s merged commit 4802b96 into python:3.12Jan 19, 2026
36 of 37 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

release-blockertype-securityA security issue

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@gpshead@Yhg1s