Benoit Chesneau
|
ffcebce4a7
|
Fix ASGI callback parser header validation
Add security checks to PythonProtocol per RFC 9110/9112:
- Reject duplicate Content-Length headers
- Reject CL + TE combinations
- Reject chunked in HTTP/1.0
- Reject stacked chunked encoding
- Validate Transfer-Encoding values
- Strict chunk size validation
Add PROXY protocol v1/v2 support to callback parser.
Add treq-based test infrastructure for ASGI parser.
|
2026-03-26 06:32:15 +01:00 |
|