R David Murray
|
5f21f43af7
|
#22758: fix regression in handling of secure cookies.
This backports the fix from #16611, per discussion with the release
manager.
|
2016-07-10 13:32:43 -04:00 |
|
Benjamin Peterson
|
9bd476ea57
|
allow square brackets in cookie values (closes #22931)
|
2015-05-23 10:36:48 -05:00 |
|
Antoine Pitrou
|
dad182c16e
|
Lax cookie parsing in http.cookies could be a security issue when combined
with non-standard cookie handling in some Web browsers.
Reported by Sergey Bobrov.
|
2014-09-17 00:23:55 +02:00 |
|
Georg Brandl
|
f0746ca463
|
Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more than
100 headers are read. Adapted from patch by Jyrki Pulliainen.
|
2014-09-30 14:08:04 +02:00 |
|
Ned Deily
|
915a30fb0d
|
Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435. Patch by Zach Byrne.
|
2014-07-12 22:06:26 -07:00 |
|
Benjamin Peterson
|
73b8b1cdb8
|
url unquote the path before checking if it refers to a CGI script (closes #21766)
|
2014-06-14 18:36:29 -07:00 |
|
Benjamin Peterson
|
35aca89617
|
merge 3.1 (#19435)
|
2013-10-30 12:48:59 -04:00 |
|
Benjamin Peterson
|
04e9de40f3
|
use the collapsed path in the run_cgi method (closes #19435)
|
2013-10-30 12:43:09 -04:00 |
|
Senthil Kumaran
|
1e7551dc87
|
Reverting the changeset 5126e62c60af made for Issue #12921
|
2013-03-05 02:25:58 -08:00 |
|
Senthil Kumaran
|
3fb066d286
|
Fix Issue #12921: BaseHTTPServer's send_error should send the correct error
response message when send_error includes a message in addition to error
status. Patch contributed by Karl.
|
2013-03-05 01:22:57 -08:00 |
|
Serhiy Storchaka
|
b5b9c8cd40
|
Issue #16723: httplib.HTTPResponse no longer marked closed when the connection
is automatically closed.
|
2013-02-06 10:31:57 +02:00 |
|
Antoine Pitrou
|
de59565f29
|
Simplify code in HTTPResponse.read()
|
2013-02-02 23:08:51 +01:00 |
|
Antoine Pitrou
|
beec61ae4e
|
Issue #15633: httplib.HTTPResponse is now mark closed when the server sends less than the advertised Content-Length.
|
2013-02-02 22:49:34 +01:00 |
|
Antoine Pitrou
|
084daa2f74
|
Issue #16298: In HTTPResponse.read(), close the socket when there is no Content-Length and the incoming stream is finished.
Patch by Eran Rundstein.
|
2012-12-15 19:11:54 +01:00 |
|
Ezio Melotti
|
0847db7c01
|
#15980: properly escape newlines in docstrings. Patch by Serhiy Storchaka.
|
2012-09-21 16:30:22 +03:00 |
|
Senthil Kumaran
|
aeeba2629a
|
Fix for issue14426 - buildbots here I come
|
2012-05-20 16:58:30 +08:00 |
|
Senthil Kumaran
|
00c2ec282e
|
Issue #14426: Correct the Date format in Expires attribute of Set-Cookie. Patch by Federico Reghenzani and Müte Invert
|
2012-05-20 12:05:16 +08:00 |
|
Senthil Kumaran
|
5fa4a89601
|
Fix Issue14721: Send Content-length: 0 for empty body () in the http.client requests
|
2012-05-19 16:58:09 +08:00 |
|
Senthil Kumaran
|
db727b4a77
|
Fix issue6085 - Remove the delay caused by fqdn lookup while logging in BaseHTTPRequestHandler
|
2012-04-29 13:41:03 +08:00 |
|
Senthil Kumaran
|
7e70a5c169
|
httplib - minor update to check empty response
|
2012-04-29 10:39:49 +08:00 |
|
Senthil Kumaran
|
b12771ab30
|
3.2 - Fix for Issue13684 - httplib tunnel infinite loop
|
2012-04-23 23:50:07 +08:00 |
|
Senthil Kumaran
|
d70846b1b1
|
3.2 - Issue 10484 - Incorporate improvements to CGI module - Suggested by Glenn Linderman. Refactor code and tests
|
2012-04-12 02:34:32 +08:00 |
|
Senthil Kumaran
|
dbb369d0ef
|
3.2- fix the incorrect changes made for PATH_INFO value - Issue10484
|
2012-04-11 03:15:28 +08:00 |
|
Senthil Kumaran
|
be3f851411
|
closes issue10484 - Fix the http.server's cgi PATH_INFO handling problem
|
2012-03-16 01:13:50 -07:00 |
|
Senthil Kumaran
|
3075549d53
|
Minor code style improvements in http.server suggested in Issue13294.
|
2011-12-23 17:03:41 +08:00 |
|