#12578: multipartparser.Parser does not accept non-canonical bare CR and bare LF
----------------------------+-----------------------------------------------
Reporter: jfenwick | Owner: nobody
Status: new | Milestone:
Component: Core framework | Version: 1.1
Keywords: | Stage: Unreviewed
Has_patch: 0 |
----------------------------+-----------------------------------------------
According to RFC 2616, Section 3.7.1:
http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.7.1
"HTTP applications MUST accept CRLF, bare CR, and bare LF as being
representative of a line break in text media received via HTTP."
The Parser object in multipartparser can only parse canonical CRLF because
of this line:
http://code.djangoproject.com/browser/django/trunk/django/http/multipartparser.py#L553
As a result, any data coming through the WSGI gateway that does not
conform to canonical CRLF but is still considered valid by RFC 2616 be
processed incorrectly.
--
Ticket URL: <http://code.djangoproject.com/ticket/12578>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/django-updates?hl=en.
