Commits

Commit history

1. Commits on Jun 28, 2026

   • [3.11] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (GH-145600) (#146026)

     Show description for dae4b1a
     

     3 peopleauthored
     dae4b1aView commit details

     Copy full SHA for dae4b1a

     View code at this pointBrowse repository at this point

   • [3.11] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749) (#152528)

     miss-islington

     authored
     f86064eView commit details

     Copy full SHA for f86064e

     View code at this pointBrowse repository at this point
2. Commits on Jun 27, 2026

   • [3.11] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146… (#148351)

     Show description for 56b7100
     

     sethmlarson

     and

     illia-v

     authored
     56b7100View commit details

     Copy full SHA for 56b7100

     View code at this pointBrowse repository at this point
3. Commits on Jan 25, 2026

   • [3.11] gh-119451: Fix a potential denial of service in http.client (GH-119454) (#142141)

     Show description for afc40bd
     

     miss-islington

     and

     serhiy-storchaka

     authored
     afc40bdView commit details

     Copy full SHA for afc40bd

     View code at this pointBrowse repository at this point

   • [3.11] gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-142216) (#142298)

     Show description for fa1aae0
     

     miss-islington

     and

     serhiy-storchaka

     authored
     fa1aae0View commit details

     Copy full SHA for fa1aae0

     View code at this pointBrowse repository at this point

   • [3.11] gh-143919: Reject control characters in http cookies (#144092)

     Show description for b1869ff
     

     4 peopleauthored
     b1869ffView commit details

     Copy full SHA for b1869ff

     View code at this pointBrowse repository at this point
4. Commits on Sep 4, 2024

   • [3.11] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123105)

     Show description for d4ac921
     

     miss-islington

     and

     serhiy-storchaka

     authored
     d4ac921View commit details

     Copy full SHA for d4ac921

     View code at this pointBrowse repository at this point
5. Commits on Feb 17, 2024

   • [3.11] gh-100985: Consistently wrap IPv6 IP address during CONNECT (GH-100986) (GH-115606)

     Show description for 6fbc610
     

     serhiy-storchaka

     and

     derekhiggins

     authored
     6fbc610View commit details

     Copy full SHA for 6fbc610

     View code at this pointBrowse repository at this point
6. Commits on Dec 18, 2023

   • [3.11] gh-113199: Make read1() and readline() of HTTPResponse close IO after reading all data (GH-113200) (GH-113260)

     Show description for 44bdb6d
     

     miss-islington

     and

     illia-v

     authored
     44bdb6dView commit details

     Copy full SHA for 44bdb6d

     View code at this pointBrowse repository at this point
7. Commits on Nov 19, 2023

   • [3.11] gh-73561: Omit interface scope from IPv6 when used as Host header (GH-93324) (#112273)

     Show description for f6e11ea
     

     miss-islington

     and

     mib1185

     authored
     f6e11eaView commit details

     Copy full SHA for f6e11ea

     View code at this pointBrowse repository at this point
8. Commits on May 26, 2023

   • [3.11] gh-104924: Fix `read()able` in `http.client` log messages (gh-104926) (gh-104971)

     Show description for f585ed1
     

     miss-islington

     and

     arhadthedev

     authored
     f585ed1View commit details

     Copy full SHA for f585ed1

     View code at this pointBrowse repository at this point
9. Commits on May 12, 2023

   • [3.11] gh-103204: `http.server` - Enforce that HTTP version numbers must consist only of digits (GH-103205) (#104438)

     Show description for b4c1ca2
     

     4 peopleauthored
     b4c1ca2View commit details

     Copy full SHA for b4c1ca2

     View code at this pointBrowse repository at this point
10. Commits on May 3, 2023

    • [3.11] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104123)

      Show description for 4536b2e
      

      4 peopleauthored
      4536b2eView commit details

      Copy full SHA for 4536b2e

      View code at this pointBrowse repository at this point
11. Commits on May 2, 2023

    • [3.11] GH-103472: close response in HTTPConnection._tunnel (GH-103473) (#104077)

      Show description for 0d40264
      

      3 peopleauthored
      0d40264View commit details

      Copy full SHA for 0d40264

      View code at this pointBrowse repository at this point
12. Commits on Mar 29, 2023

    • [3.11] gh-103112: Add http.client.HTTPResponse.read docstring and fix pydoc output (GH-103113) (#103119)

      Show description for ae42c1d
      

      5 peopleauthored
      ae42c1dView commit details

      Copy full SHA for ae42c1d

      View code at this pointBrowse repository at this point
13. Commits on Dec 24, 2022

    • [3.11] gh-100474: Fix handling of dirs named index.html in http.server (GH-100505)

      Show description for 714a93f
      

      miss-islington

      and

      Fraetor

      authored
      714a93fView commit details

      Copy full SHA for 714a93f

      View code at this pointBrowse repository at this point
14. Commits on Dec 20, 2022

    • [3.11] gh-99576: Fix cookiejar file that was not truncated for some classes (GH-99616) (GH-100377)

      Show description for 73d2b15
      

      3 peopleauthored
      73d2b15View commit details

      Copy full SHA for 73d2b15

      View code at this pointBrowse repository at this point
15. Commits on Dec 5, 2022

    • gh-100001: Also escape \s in http.server log messages. (GH-100038)

      Show description for b2ff0f7
      

      miss-islington

      and

      gpshead

      authored
      b2ff0f7View commit details

      Copy full SHA for b2ff0f7

      View code at this pointBrowse repository at this point

    • gh-100001: Omit control characters in http.server stderr logs. (GH-100002)

      Show description for a726f74
      

      miss-islington

      and

      gpshead

      authored
      a726f74View commit details

      Copy full SHA for a726f74

      View code at this pointBrowse repository at this point
16. Commits on Oct 3, 2022

    • Document that MozillaCookieJar works for curl's cookie files (GH-91852)

      Show description for d074286
      

      miss-islington

      and

      verhovsky

      authored
      d074286View commit details

      Copy full SHA for d074286

      View code at this pointBrowse repository at this point
17. Commits on Jun 26, 2022

    • Run Tools/scripts/reindent.py (GH-94225)

      Show description for f0f3a42
      

      miss-islington

      and

      vstinner

      authored
      f0f3a42View commit details

      Copy full SHA for f0f3a42

      View code at this pointBrowse repository at this point
18. Commits on Jun 21, 2022

    • gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879)

      Show description for e2e8847
      

      miss-islington

      and

      gpshead

      authored
      e2e8847View commit details

      Copy full SHA for e2e8847

      View code at this pointBrowse repository at this point
19. Commits on Jun 9, 2022

    • [3.11] gh-79096: Protect cookie file created by {LWP,Mozilla}CookieJar.save() (GH-93463) (GH-93636)

      Show description for 2084f94
      

      3 peopleauthored
      2084f94View commit details

      Copy full SHA for 2084f94

      View code at this pointBrowse repository at this point
20. Commits on May 5, 2022

    • gh-91996: Add an HTTPMethod StrEnum to http (GH-91997)

      Show description for 9a0a7b4
      

      cibofo

      and

      ethanfurman

      authored
      9a0a7b4View commit details

      Copy full SHA for 9a0a7b4

      View code at this pointBrowse repository at this point
21. Commits on May 2, 2022

    • bpo-46285: Add command-line option -p/--protocol to module http.server (#30999)

      Show description for 2d30ade
      

      3 peopleauthored
      2d30adeView commit details

      Copy full SHA for 2d30ade

      View code at this pointBrowse repository at this point
22. Commits on Apr 21, 2022

    • bpo-42066: CookieJar cookies should not be sorted (GH-22745)

      IKermani

      authored
      615b24cView commit details

      Copy full SHA for 615b24c

      View code at this pointBrowse repository at this point
23. Commits on Apr 19, 2022

    • bpo-46075: Store localhost cookies in CookieJar (#30108)

      Show description for b6d5e3c
      

      keddad

      and

      JelleZijlstra

      authored
      b6d5e3cView commit details

      Copy full SHA for b6d5e3c

      View code at this pointBrowse repository at this point
24. Commits on Feb 23, 2022

    • closes bpo-46736: SimpleHTTPRequestHandler now uses HTML5. (GH-31533)

      Show description for 0bb40a4
      

      corona10

      and

      arhadthedev

      authored
      0bb40a4View commit details

      Copy full SHA for 0bb40a4

      View code at this pointBrowse repository at this point
25. Commits on Feb 3, 2022

    • bpo-46436: Fix command-line option -d/--directory in module http.server (GH-30701)

      Show description for 2d08034
      geryogam

      authored
      2d08034View commit details

      Copy full SHA for 2d08034

      View code at this pointBrowse repository at this point

    • bpo-46565: `del` loop vars that are leaking into module namespaces (GH-30993)

      sobolevn

      authored
      0cbdd21View commit details

      Copy full SHA for 0cbdd21

      View code at this pointBrowse repository at this point
26. Commits on Dec 7, 2021

    • bpo-28953: Use `raise from` when raising new IncompleteRead (GH-29861)

      Show description for c5c3652
      180909

      authored
      c5c3652View commit details

      Copy full SHA for c5c3652

      View code at this pointBrowse repository at this point
27. Commits on Oct 6, 2021

    • bpo-45328: Avoid failure in OSs without TCP_NODELAY support (GH-28646)

      Show description for 0571b93
      rtobar

      authored
      0571b93View commit details

      Copy full SHA for 0571b93

      View code at this pointBrowse repository at this point
28. Commits on Jun 13, 2021

    • Fix typos in multiple files (GH-26689)

      Show description for 17b16e1
      

      enjoy-binbin

      and

      terryjreedy

      authored
      17b16e1View commit details

      Copy full SHA for 17b16e1

      View code at this pointBrowse repository at this point
29. Commits on May 6, 2021

    • bpo-43972: Set content-length to 0 for http.server.SimpleHTTPRequestHandler 301s (GH-25705)

      Show description for fb42725
      

      sirosen

      and

      orsenthil

      authored
      fb42725View commit details

      Copy full SHA for fb42725

      View code at this pointBrowse repository at this point
30. Commits on May 5, 2021

    • bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916)

      Show description for 47895e3
      

      gen-xu

      and

      gpshead

      authored
      47895e3View commit details

      Copy full SHA for 47895e3

      View code at this pointBrowse repository at this point