Benoit Chesneau 9bc5891b4b fix: drop body framing on HEAD/1xx/204/304 in WSGI responses ...

Mirror the ASGI strip-and-warn behavior (commits 2191832b, 41ec7527,
0d35d2ae) on the WSGI path. Previously gunicorn would forward an
app-supplied Content-Length and body bytes for HEAD requests and
1xx/204/304 responses, violating RFC 9110 / RFC 9112.

- Add _response_omits_body() and _response_forbids_content_length()
  helpers on Response.
- After process_headers, strip Content-Length and clear
  response_length on 1xx/204 (RFC 9110 §6.4.2 forbids it). HEAD and
  304 keep app-supplied Content-Length.
- write() and sendfile() drop body bytes for no-body responses and
  log a single WARNING per request.
- is_chunked() now also covers 1xx via _omits_body.

Fixes #3413

2026-05-05 11:30:24 +02:00

..

config

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

ctl

Use user-writable default path for control socket (#3551)

2026-03-23 20:08:03 +01:00

dirty

feat(dirty): add TTIN/TTOU signal support for dynamic worker scaling

2026-02-12 23:52:12 +01:00

docker

test: pass action name to dirty client and stabilize after TTOU spam

2026-05-04 10:32:44 +02:00

requests

fix: enforce proxy_allow_ips and tighten PROXY parsing in ASGI

2026-05-03 22:28:48 +02:00

workers

Remove eventlet from test dependencies

2026-03-22 17:50:32 +01:00

conftest.py

test: skip fast parser on PyPy (gunicorn_h1c C extension is CPython-only)

2026-04-19 23:48:18 +02:00

support_dirty_app.py

feat(dirty): add class attribute workers support and e2e tests

2026-02-01 03:04:35 +01:00

support_dirty_apps.py

test(dirty): add multi-app routing tests

2026-01-25 10:23:25 +01:00

support.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

t.py

class Name(object): -> class Name:

2024-04-22 03:33:30 +02:00

test_arbiter.py

fix: lazy import dirty module for gevent compatibility

2026-02-03 01:15:39 +01:00

test_asgi_callback_parser.py

Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension support

2026-03-26 15:46:51 +01:00

test_asgi_compliance.py

Fix ASGI disconnect handling for Django-style apps

2026-04-02 23:55:27 +02:00

test_asgi_disconnect.py

refactor: split BodyReceiver._closed into transport vs body-wait

2026-05-03 20:42:55 +02:00

test_asgi_error_handling.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_forwarded_headers.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_header_security.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_http_scope.py

Add raw_path to mock requests in tests

2026-03-22 17:07:08 +01:00

test_asgi_invalid_requests.py

fix: reject asterisk-form request-target outside OPTIONS (RFC 9112 section 3.2.4)

2026-04-19 10:43:01 +02:00

test_asgi_keepalive_smuggling.py

test: parametrize smuggling regression across python and fast parsers

2026-05-03 21:18:15 +02:00

test_asgi_lifespan.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_parser_validation.py

Fix ASGI callback parser header validation

2026-03-26 06:32:15 +01:00

test_asgi_protocol_compat.py

Fix RFC 9110 section reference: 8.6 not 15.2

2026-04-04 03:10:52 +02:00

test_asgi_protocol_http.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_proxy_protocol.py

fix: enforce proxy_allow_ips and tighten PROXY parsing in ASGI

2026-05-03 22:28:48 +02:00

test_asgi_streaming.py

fix: keep Content-Length on HEAD and 304 responses

2026-05-03 22:32:28 +02:00

test_asgi_uwsgi.py

Add uWSGI protocol support to ASGI worker (#3467)

2026-01-25 14:45:07 +01:00

test_asgi_valid_requests.py

fix: address six WSGI/ASGI parser and protocol findings

2026-05-03 18:19:08 +02:00

test_asgi_websocket_enhanced.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_websocket_protocol.py

Fix WebSocket race condition in callback-based _read_exact()

2026-03-23 13:08:57 +01:00

test_asgi_worker.py

fix: enforce proxy_allow_ips and tighten PROXY parsing in ASGI

2026-05-03 22:28:48 +02:00

test_config.py

Use user-writable default path for control socket (#3551)

2026-03-23 20:08:03 +01:00

test_control_socket_integration.py

test: poll for control socket re-creation after SIGHUP

2026-05-03 19:13:40 +02:00

test_dirty_app.py

feat(dirty): add class attribute workers support and e2e tests

2026-02-01 03:04:35 +01:00

test_dirty_arbiter.py

feat(dirty): update arbiter for binary protocol

2026-02-11 23:03:40 +01:00

test_dirty_client.py

fix: resolve lint issues in dirty arbiter modules

2026-01-25 10:21:18 +01:00

test_dirty_config.py

feat: add dirty arbiters for long-running blocking operations

2026-01-25 10:21:18 +01:00

test_dirty_errors.py

feat(dirty): add per-app worker allocation for memory optimization

2026-02-01 02:40:09 +01:00

test_dirty_hooks.py

feat: add dirty arbiters for long-running blocking operations

2026-01-25 10:21:18 +01:00

test_dirty_integration.py

feat(dirty): update client for binary protocol

2026-02-11 23:12:44 +01:00

test_dirty_protocol.py

feat(dirty): implement binary protocol

2026-02-11 22:58:43 +01:00

test_dirty_stash.py

feat(dirty): add stash - global shared state between workers (#3503)

2026-02-12 21:45:49 +01:00

test_dirty_tlv.py

fix(dirty): convert dict int keys to strings in TLV encoder

2026-02-11 23:39:53 +01:00

test_dirty_worker.py

feat(dirty): update worker for binary protocol

2026-02-11 23:01:21 +01:00

test_early_hints.py

fix: validate headers in early_hints callback to match process_headers

2026-04-13 17:21:24 +08:00

test_gthread.py

fix(gthread): prevent thread pool exhaustion from slow clients

2026-02-19 15:21:01 +01:00

test_gtornado.py

tornado: Require Tornado 6.5.0+ for security fixes

2026-01-23 00:02:01 +01:00

test_header_policy_parity.py

fix: address six WSGI/ASGI parser and protocol findings

2026-05-03 18:19:08 +02:00

test_http2_alpn.py

chore: remove eventlet worker; add h2 and uvloop to test deps

2026-05-05 00:36:46 +02:00

test_http2_async_connection.py

fix(http2): achieve 100% h2spec compliance (146/146 tests)

2026-01-27 15:42:42 +01:00

test_http2_config.py

fix(http2): validate frame size per RFC 7540 (16384-16777215)

2026-01-27 10:51:29 +01:00

test_http2_connection.py

chore: remove integration test file and trim docstring

2026-04-01 11:57:03 +11:00

test_http2_errors.py

Add HTTP/2 tests

2026-01-27 09:57:32 +01:00

test_http2_integration.py

Add HTTP/2 tests

2026-01-27 09:57:32 +01:00

test_http2_request.py

feat(http2): add stream priority support (RFC 7540 Section 5.3)

2026-01-27 11:44:33 +01:00

test_http2_stream.py

fix: prevent HTTP/2 ASGI request body duplication

2026-03-26 14:15:14 +11:00

test_http.py

fix: drop body framing on HEAD/1xx/204/304 in WSGI responses

2026-05-05 11:30:24 +02:00

test_invalid_requests.py

fix: reject asterisk-form request-target outside OPTIONS (RFC 9112 section 3.2.4)

2026-04-19 10:43:01 +02:00

test_logger.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

test_pidfile.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_python_protocol.py

Add callback-based HTTP parser for ASGI protocol

2026-03-21 23:24:23 +01:00

test_reload.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

test_signal_integration.py

Skip SIGINT shutdown test on PyPy

2026-03-23 14:10:05 +01:00

test_sock.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_ssl.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_statsd.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

test_systemd.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_util.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_uwsgi.py

uwsgi: Add native uWSGI binary protocol support

2026-01-22 18:32:17 +01:00

test_valid_requests.py

Integrate gunicorn_h1c 0.4.1 exception types and limit parameters

2026-03-22 13:43:18 +01:00

treq_asgi.py

Add InvalidChunkExtension mapping and fast parser support for ASGI tests (#3565)

2026-03-31 03:07:56 +02:00

treq.py

Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension support

2026-03-26 15:46:51 +01:00