mirror of
https://github.com/frappe/gunicorn.git
synced 2026-07-01 18:21:30 +08:00
b00f125755
Update to gunicorn_h1c >= 0.6.3 which adds InvalidChunkExtension validation for rejecting chunk extensions with bare CR bytes per RFC 9112. Changes: - Update pyproject.toml to require gunicorn_h1c >= 0.6.3 - Add InvalidChunkExtension exception to gunicorn/asgi/parser.py - Handle InvalidChunkExtension from both Python and C parsers in protocol.py - Add chunk extension validation tests - Update treq.py badrequest class to support hex escapes
8 lines
125 B
HTTP
8 lines
125 B
HTTP
POST /chunked_bare_cr_in_extension HTTP/1.1\r\n
|
|
Transfer-Encoding: chunked\r\n
|
|
\r\n
|
|
5;ext=val\x0Due\r\n
|
|
hello\r\n
|
|
0\r\n
|
|
\r\n
|