Skip to content

v6.3.3

@bdarnell bdarnell tagged this 11 Aug 14:45
Aug 11, 2023
------------

Security improvements
~~~~~~~~~~~~~~~~~~~~~

- The ``Content-Length`` header and ``chunked`` ``Transfer-Encoding`` sizes are now parsed
  more strictly (according to the relevant RFCs) to avoid potential request-smuggling
  vulnerabilities when deployed behind certain proxies.
Assets 2