Skip to content

[3.11] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146…#148351

Open
sethmlarson wants to merge 1 commit into
python:3.11from
sethmlarson:backport-05ed7ce-3.11
Open

[3.11] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146…#148351
sethmlarson wants to merge 1 commit into
python:3.11from
sethmlarson:backport-05ed7ce-3.11

Conversation

@sethmlarson
Copy link
Copy Markdown
Contributor

@sethmlarson sethmlarson commented Apr 10, 2026

…ythonGH-146212)

(cherry picked from commit 05ed7ce)

Co-authored-by: Seth Larson <seth@python.org>
Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
@github-actions
Copy link
Copy Markdown

This PR is stale because it has been open for 30 days with no activity.

@github-actions github-actions Bot added the stale Stale PR or inactive for long period of time. label May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting review release-blocker stale Stale PR or inactive for long period of time. type-security A security issue

Projects

Development

Successfully merging this pull request may close these issues.

1 participant