Add HTTP method validation (aio-libs#6533) (aio-libs#7806)

(cherry picked from commit 75fca0b)

Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com>

CHANGES/6533.feature

@@ -0,0 +1 @@
+Add HTTP method validation.

aiohttp/client_reqrep.py

@@ -81,6 +81,7 @@
     from .tracing import Trace
 
 
+_CONTAINS_CONTROL_CHAR_RE = re.compile(r"[^-!#$%&'*+.^_`|~0-9a-zA-Z]")
 json_re = re.compile(r"^application/(?:[\w.+-]+?\+)?json")
 
 
@@ -275,10 +276,16 @@ def __init__(
         trust_env: bool = False,
         server_hostname: Optional[str] = None,
     ):
-
         if loop is None:
             loop = asyncio.get_event_loop()
 
+        match = _CONTAINS_CONTROL_CHAR_RE.search(method)
+        if match:
+            raise ValueError(
+                f"Method cannot contain non-token characters {method!r} "
+                "(found at least {match.group()!r})"
+            )
+
         assert isinstance(url, URL), url
         assert isinstance(proxy, (URL, type(None))), proxy
         # FIXME: session is None in tests only, need to fix tests