cpython/Lib/http
Miss Islington (bot) dcc3eaef98
[3.12] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123104)
gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075)

This fixes CVE-2024-7592.
(cherry picked from commit 44e458357f)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
2024-08-24 15:37:11 -07:00
..
__init__.py gh-95149: Enhance http.HTTPStatus with properties that indicate the HTTP status category (GH-95453) 2022-08-30 11:11:44 -07:00
client.py [3.12] gh-100985: Consistently wrap IPv6 IP address during CONNECT (GH-100986) (GH-115591) 2024-02-17 15:01:48 +02:00
cookiejar.py GH-103857: Deprecate utcnow and utcfromtimestamp (#103858) 2023-04-27 11:32:30 -06:00
cookies.py [3.12] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123104) 2024-08-24 15:37:11 -07:00
server.py gh-103204: http.server - Enforce that HTTP version numbers must consist only of digits (#103205) 2023-05-12 13:25:58 -07:00