Skip to content

gh-143916: Allow HTAB in wsgiref header values #144118

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
sethmlarson wants to merge 3 commits into
base: main
Choose a base branch
from
Open

gh-143916: Allow HTAB in wsgiref header values #144118

sethmlarson wants to merge 3 commits into from
+32 −21

Conversation

@sethmlarson
Copy link
Contributor

@sethmlarson sethmlarson commented Jan 21, 2026 •
edited by bedevere-app bot
Loading

In #143917 we were overzealous, HTAB (0x09) is allowed in header values but not header names.

@bedevere-app bedevere-app bot mentioned this pull request Jan 21, 2026
Closed
@benediktjohannes benediktjohannes mentioned this pull request Jan 31, 2026
Draft
vstinner
vstinner reviewed Feb 3, 2026
View reviewed changes
@vstinner
Copy link
Member

vstinner commented Feb 3, 2026

See also PR gh-144371 which rejects control characters in Lib/wsgiref/handlers.py.

sethmlarson and others added 2 commits February 4, 2026 18:57
@sethmlarson @vstinner
Apply suggestions from code review
aade17a 
Co-authored-by: Victor Stinner <vstinner@python.org>
@sethmlarson
Add name=False to values
aa2619b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vstinner vstinner vstinner left review comments

Assignees

No one assigned

Labels

skip news

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sethmlarson @vstinner