Skip to content

Commit 2751d9b

Browse files
committed
gh-142533: Ensure CRLF is mentioned in the security consideration section only
1 parent 39c5198 commit 2751d9b

File tree

2 files changed

+2
-6
lines changed

2 files changed

+2
-6
lines changed

Doc/library/http.server.rst

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -287,9 +287,7 @@ instantiation, of which this module provides three different variants:
287287
specifying its value. Note that, after the send_header calls are done,
288288
:meth:`end_headers` MUST BE called in order to complete the operation.
289289

290-
This method does not reject input containing CRLF sequences allowing the
291-
possibility of CRLF injection, where a single method call can inject
292-
multiple arbitrary headers.
290+
This method does not reject input containing CRLF sequences.
293291

294292
.. versionchanged:: 3.2
295293
Headers are stored in an internal buffer.

Doc/library/wsgiref.rst

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -263,9 +263,7 @@ manipulation of WSGI response headers using a mapping-like interface.
263263

264264
Content-Disposition: attachment; filename="bud.gif"
265265

266-
This method does not reject input containing CRLF sequences allowing the
267-
possibility of CRLF injection, where a single method call can inject
268-
multiple arbitrary headers.
266+
This method does not reject input containing CRLF sequences.
269267

270268
.. versionchanged:: 3.5
271269
*headers* parameter is optional.

0 commit comments

Comments
 (0)