6fd01eff96
- Update 0.16.0: * Security fix (CVE-2025-43859, bsc#1241872) Reject certain malformed Transfer-Encoding: chunked bodies that were previously accepted. These could have enabled request-smuggling attacks when an h11-based HTTP server was placed behind a load balancer with a matching bug in its chunked handling. Advisory with more details: https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj - 0.15.0: * Reject Content-Lengths >= 1 zettabyte (1 billion terabytes) early, without attempting to parse the integer (#181)
Daniel Garcia2025-04-25 07:30:03 +00:00
6c5bb8ceb9
Accepting request 1144406 from devel:languages:python
Ana Guerrero2024-02-06 15:33:02 +00:00
90500dfb32
- update to 0.13.0: * Clarify that the Headers class is a Sequence and inherit from the collections Sequence abstract base class to also indicate this (and gain the mixin methods). * Switch event classes to dataclasses for easier typing and slightly improved performance. * Shorten traceback of protocol errors for easier readability * Add typing including a PEP 561 marker for usage by type checkers * Expand the allowed status codes to [0, 999] from [0, 600] * Ensure request method is a valid token
Dirk Mueller2022-02-16 23:09:53 +00:00
a1c519aa6f
- update to 0.11.0: * h11 now stores and makes available the raw header name as received. In addition h11 will write out header names with the same casing as passed to it. This allows compatibility with systems that expect titlecased header names. See #31 * Multiple content length headers are now merged into a single header if all the values are equal, if any are unequal a LocalProtocol error is raised (as before). See #92
Dirk Mueller2020-11-10 08:03:02 +00:00
Ana Guerrero
Daniel Garcia
Dirk Mueller
Dominique Leuenberger
Luigi Baldoni
Tomáš Chvátal
Matej Cepl