Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
HTTP Response Splitting #117
If for some reason an application returns a
This will then on https://github.com/Pylons/waitress/blob/master/waitress/task.py#L260 get sent directly to the user, which would mean the end user sees the following:
Which is bad (tm).
Currently waitress is not PEP3333 compliant:
We should do a check to make sure that the header value does not contain illegal characters (control characters in this case).