Reject control characters in wsgiref.headers.Headers · Issue #143916 · python/cpython · GitHub

python / cpython Public

• Notifications You must be signed in to change notification settings
• Fork 35.3k
• Star 74.9k

• Code
• Issues 5k+
• Pull requests 2.6k
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Reject control characters in wsgiref.headers.Headers #143916

Copy link

Copy link

Closed

Closed

Reject control characters in wsgiref.headers.Headers#143916

Copy link

Labels

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue

Description

sethmlarson

opened on Jan 16, 2026

Issue body actions

Linked PRs

• gh-143916: Reject control characters in wsgiref.headers.Headers  #143917
• [3.14] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) #143972
• [3.13] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) #143973
• [3.12] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) (GH-143973) #143974
• [3.11] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) (GH-143973) #143975
• [3.10] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) (GH-143973) #143976
• gh-143916: Allow HTAB in wsgiref header values #144118
• [3.14] gh-143916: Allow HTAB in wsgiref header values #144761
• [3.13] gh-143916: Allow HTAB in wsgiref header values #144762
• [3.11] gh-143916: Allow HTAB in wsgiref header values #145139
• [3.10] gh-143916: Allow HTAB in wsgiref header values #145140
• [3.12] gh-143916: Allow HTAB in wsgiref header values #145141

Reactions are currently unavailable

Metadata

Metadata

Assignees

No one assigned

Labels

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue

Projects

Release and Deferred blockers 🚫

Status

Done

Show more project fields

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions