You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
RFC 7230: server MUST reject messages with BWS after field-name (#445)
Obey the RFC requirement to reject HTTP requests with whitespace
between field-name and the colon delimiter. Rejection is
critical in the presence of broken HTTP agents that mishandle
malformed messages.
If not, it will be used to smuggle http request.
Test code:
Test script:
Expected behavior:
return 400
Actual behavior:
return 200
Version:
tornado 6.0.3
python 3.7.5
The text was updated successfully, but these errors were encountered: