jingrow/gunicorn
1
0
Fork 0
mirror of https://github.com/frappe/gunicorn.git synced 2026-01-14 11:09:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

Raise InvalidRequestLine instead of ValueError if the line contains malicious data.

Browse Source 
Closes #1023
This commit is contained in:
Berker Peksag 2015-05-09 19:12:47 +03:00
parent a7354cf8fe
commit b951175c66
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
gunicorn/http/message.py
View File

@ -323,7 +323,10 @@ class Request(Message):
else: else:
self.uri = bits[1] self.uri = bits[1]
parts = urlsplit(self.uri) try:
parts = urlsplit(self.uri)
except ValueError:
raise InvalidRequestLine(line)
self.path = parts.path or "" self.path = parts.path or ""
self.query = parts.query or "" self.query = parts.query or ""
self.fragment = parts.fragment or "" self.fragment = parts.fragment or ""