jingrow/gunicorn
1
0
Fork 0
mirror of https://github.com/frappe/gunicorn.git synced 2026-01-14 11:09:11 +08:00
Code Issues Packages Projects Releases Wiki Activity
gunicorn/tests/requests/invalid
History
Paul J. Dorn 7ebe442d08 strict HTTP version validation 
Note: This is unrelated to a reverse proxy potentially talking HTTP/3 to clients.
This is about the HTTP protocol version spoken to Gunicorn, which is HTTP/1.0 or HTTP/1.1.

Little legitimate need for processing HTTP 1 requests with ambiguous version numbers.
Broadly refuse.

Co-authored-by: Ben Kallus <benjamin.p.kallus.gr@dartmouth.edu>
2023-12-15 13:33:31 +01:00
..
001.http
Added more valid request tests.
2010-06-03 16:11:18 -04:00
001.py
Added more valid request tests.
2010-06-03 16:11:18 -04:00
002.http
Added more valid request tests.
2010-06-03 16:11:18 -04:00
002.py
check if Request Line is too large.
2012-02-20 09:56:06 +01:00
003.http
RFC compliant request line and header parsing
2023-12-15 13:33:31 +01:00
003.py
RFC compliant request line and header parsing
2023-12-15 13:33:31 +01:00
003b.http
strict: header field validation: stop casefolding
2023-12-15 13:33:31 +01:00
003b.py
strict: header field validation: stop casefolding
2023-12-15 13:33:31 +01:00
003c.http
strict: header field validation: stop casefolding
2023-12-15 13:33:31 +01:00
003c.py
strict: header field validation: stop casefolding
2023-12-15 13:33:31 +01:00
004.http
Added more valid request tests.
2010-06-03 16:11:18 -04:00
004.py
Added more valid request tests.
2010-06-03 16:11:18 -04:00
005.http
Added more valid request tests.
2010-06-03 16:11:18 -04:00
005.py
Added more valid request tests.
2010-06-03 16:11:18 -04:00
006.http
check if Request Line is too large.
2012-02-20 09:56:06 +01:00
006.py
check if Request Line is too large.
2012-02-20 09:56:06 +01:00
007.http
test number of headers fields and size.
2012-02-20 10:36:13 +01:00
007.py
test number of headers fields and size.
2012-02-20 10:36:13 +01:00
008.http
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
008.py
test number of headers fields and size.
2012-02-20 10:36:13 +01:00
009.http
test number of headers fields and size.
2012-02-20 10:36:13 +01:00
009.py
test number of headers fields and size.
2012-02-20 10:36:13 +01:00
010.http
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
010.py
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
011.http
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
011.py
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
012.http
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
012.py
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
013.http
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
013.py
fix multiple issues with request limit
2012-05-24 12:13:34 +02:00
014.http
Check Content-Length header.
2012-09-27 19:14:40 +02:00
014.py
Check Content-Length header.
2012-09-27 19:14:40 +02:00
015.http
Check Content-Length header.
2012-09-27 19:14:40 +02:00
015.py
Check Content-Length header.
2012-09-27 19:14:40 +02:00
016.http
Do not strip leading slash from path (#1511)
2017-12-28 11:32:47 +03:00
016.py
Add test for #1023
2015-05-09 20:46:31 +03:00
017.http
Remove upper limit on max header size config (#1313)
2016-09-17 12:49:05 +03:00
017.py
Remove upper limit on max header size config (#1313)
2016-09-17 12:49:05 +03:00
018.http
Reject requests like "GET / HTTP/1a1"
2016-11-04 21:16:01 +03:00
018.py
Reject requests like "GET / HTTP/1a1"
2016-11-04 21:16:01 +03:00
019.http
Forbid contradictory secure scheme headers
2018-01-10 12:10:35 -08:00
019.py
Forbid contradictory secure scheme headers
2018-01-10 12:10:35 -08:00
020.http
Remove default strip of header name
2019-11-18 19:44:01 -05:00
020.py
Remove default strip of header name
2019-11-18 19:44:01 -05:00
021.http
Handle duplicate content-length
2019-11-18 21:16:12 -05:00
021.py
Handle duplicate content-length
2019-11-18 21:16:12 -05:00
022.http
Updating Content-Length Handling
2023-05-30 20:42:13 -05:00
022.py
Updating Content-Length Handling
2023-05-30 20:42:13 -05:00
023.http
Updating Content-Length Handling
2023-05-30 20:42:13 -05:00
023.py
Updating Content-Length Handling
2023-05-30 20:42:13 -05:00
024.http
Updating Content-Length Handling
2023-05-30 20:42:13 -05:00
024.py
Updating Content-Length Handling
2023-05-30 20:42:13 -05:00
040.http
silently drop or refuse header names w/ underscore
2023-12-15 13:33:31 +01:00
040.py
silently drop or refuse header names w/ underscore
2023-12-15 13:33:31 +01:00
chunked_01.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_01.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_02.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_02.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_03.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_03.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_04.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_04.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_05.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_05.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_06.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_06.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_07.http
silently drop or refuse header names w/ underscore
2023-12-15 13:33:31 +01:00
chunked_07.py
silently drop or refuse header names w/ underscore
2023-12-15 13:33:31 +01:00
chunked_08.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
chunked_08.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
nonascii_01.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
nonascii_01.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
nonascii_02.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
nonascii_02.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
nonascii_03.http
strict HTTP header field name validation
2023-12-15 13:33:31 +01:00
nonascii_03.py
strict HTTP header field name validation
2023-12-15 13:33:31 +01:00
nonascii_04.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
nonascii_04.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
pp_01.http
Implantation proxy protocol
2012-09-27 19:14:40 +02:00
pp_01.py
Implantation proxy protocol
2012-09-27 19:14:40 +02:00
pp_02.http
Implantation proxy protocol
2012-09-27 19:14:40 +02:00
pp_02.py
Implantation proxy protocol
2012-09-27 19:14:40 +02:00
prefix_01.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_01.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_02.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_02.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_03.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_03.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_04.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_04.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_05.http
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_05.py
fail-safe on unsupported request framing
2023-12-15 13:33:31 +01:00
prefix_06.http
strict HTTP version validation
2023-12-15 13:33:31 +01:00
prefix_06.py
strict HTTP version validation
2023-12-15 13:33:31 +01:00
version_01.http
strict HTTP version validation
2023-12-15 13:33:31 +01:00
version_01.py
strict HTTP version validation
2023-12-15 13:33:31 +01:00
version_02.http
strict HTTP version validation
2023-12-15 13:33:31 +01:00
version_02.py
strict HTTP version validation
2023-12-15 13:33:31 +01:00