Roundup Robot added the comment:
New changeset 0d115d14adfd by Georg Brandl in branch '3.2':
Issue #22419: Limit the length of incoming HTTP request in wsgiref server to
https://hg.python.org/cpython/rev/0d115d14adfd
--
___
Python tracker
Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com:
--
nosy: +Arfrever
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue22419
___
Senthil Kumaran added the comment:
The patch looks good. Yeah, wsgiref server will see the benefiting of rejecting
long url with 414.
--
nosy: +orsenthil
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue22419
Roundup Robot added the comment:
New changeset 7a4d960fc801 by Senthil Kumaran in branch '2.7':
Issue #22419: Limit the length of incoming HTTP request in wsgiref server to
65536 bytes.
https://hg.python.org/cpython/rev/7a4d960fc801
New changeset a4e0aee1a9b5 by Senthil Kumaran in branch
Senthil Kumaran added the comment:
Thanks, fixed in all versions applicable for security release.
--
assignee: - orsenthil
resolution: - fixed
stage: - resolved
status: open - closed
___
Python tracker rep...@bugs.python.org
Changes by Senthil Kumaran sent...@uthcode.com:
--
versions: +Python 2.7, Python 3.3, Python 3.4, Python 3.5
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue22419
___
New submission from Devin Cook:
BaseHTTPRequestHandler limits request length to prevent DoS. WSGIRequestHandler
should probably do the same.
See: http://bugs.python.org/issue10714
--
components: Library (Lib)
files: wsgiref_request_length.patch
keywords: patch
messages: 226931
nosy:
