jingrow/gunicorn
1
0
Fork 0
mirror of https://github.com/frappe/gunicorn.git synced 2026-07-06 12:41:31 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add RFC 7230 validation for chunked transfer-encoding

Browse Source 
Validate after fast parser returns:
- Reject chunked with HTTP/1.0
- Reject chunked + Content-Length conflict
This commit is contained in:
Benoit Chesneau 2026-03-22 00:18:25 +01:00
parent 0ca0d0cb02
commit 87bfb7d190
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
gunicorn/asgi/parser.py
View File

@ -219,6 +219,16 @@ class HttpParser:
pr.content_length = req.content_length if req.content_length >= 0 else 0 pr.content_length = req.content_length if req.content_length >= 0 else 0
pr.chunked = req.has_chunked pr.chunked = req.has_chunked
# Validate Transfer-Encoding per RFC 7230
if pr.chunked:
# Chunked requires HTTP/1.1+
if req.minor_version < 1:
raise InvalidHeader("TRANSFER-ENCODING")
# Chunked with Content-Length is invalid
if req.content_length >= 0:
raise InvalidHeader("CONTENT-LENGTH")
pr.content_length = -1
# connection_close: -1 = not set, 0 = keep-alive, 1 = close # connection_close: -1 = not set, 0 = keep-alive, 1 = close
if req.connection_close == 1: if req.connection_close == 1:
pr.must_close = True pr.must_close = True