Skip to content

_ is incorrectly permitted in Content-Length header values #738

@kenballus

Description

@kenballus

The Bug

Cheroot accepts Content-Length headers with digit-separating _ characters.

Suggested Fix

Respond 400 to any message with a Content-Length value that does not match the regex [0-9]+.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething is brokentriage

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions