Repository navigation
Reject control characters in more places in http.cookies.Morsel #145599
Description
Activity
- added a commit that references this issue
on Mar 16, 2026 - added 4 commits that reference this issue
on Mar 16, 2026 Hello @StanFromIreland, will this be backported to 3.9?
Hello @StanFromIreland, will this be backported to 3.9?
Sadly no, Python 3.9 reached its end-of-life last year, and it no longer gets security fixes: https://devguide.python.org/versions/ It's now time to upgrade to a newer Python version.
If you cannot upgrade, you should be able to copy
Lib/http/cookies.pyfrom a recent Python version to your project.Reacted by Stan Ulbrych- added a commit that references this issue
on Apr 8, 2026 2 remaining items
- added 2 commits that reference this issue
on Apr 11, 2026 - added 2 commits that reference this issue
on Apr 12, 2026 - added 2 commits that reference this issue
on Jul 22, 2026 - added a commit that references this issue
on Aug 4, 2026 - added a commit that references this issue
on Aug 14, 2026
Linked PRs
http.cookies.Morsel.update()andhttp.cookies.BaseCookie.js_output#145600http.cookies.Morsel.update()(GH-145600) #146023http.cookies.Morsel.update()(GH-145600) #146024http.cookies.Morsel.update()(GH-145600) #146025http.cookies.Morsel.update()(GH-145600) #146026http.cookies.Morsel.update()(#145600) #146027