django.git/tests/asgi, branch main

Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body size in ASGI requests.

2026-04-07T11:12:27Z

The `body` property in `HttpRequest` checks DATA_UPLOAD_MAX_MEMORY_SIZE against the declared `Content-Length` header before reading. On the ASGI path, chunked requests carry no `Content-Length`, so the check evaluated to 0 and always passed regardless of the actual body size. This work adds a new check on the actual number of bytes consumed. Thanks to Superior for the report, and to Jake Howard and Jacob Walls for reviews.

Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.

2026-04-07T11:12:09Z

Thanks Tarek Nakkouch for the report and Jake Howard and Natalia Bidart for reviews.

Fixed CVE-2025-14550 -- Optimized repeated header parsing in ASGI requests.

2026-02-03T12:53:12Z

Thanks Jiyong Yang for the report, and Natalia Bidart, Jacob Walls, and Shai Berger for reviews.

Refs #33735 -- Coped with stacklevel change in ASGITest.test_file_response().

2026-01-23T18:16:30Z

Follow-up to c042fe3a74fb213c93b1052f7de4d99a6e6948e0. The original ignore was added in 0bd2c0c9015b53c41394a1c0989afbfd94dc2830 but was not adjusted when the stacklevel changed.

Fixed #36399 -- Added support for multiple Cookie headers in HTTP/2 for ASGIRequest.

2025-08-21T14:48:54Z

Signed-off-by: SaJH

Refs #36467 -- Added test for Set-Cookie header values in ASGIHandler.

2025-06-18T09:25:14Z

Fixed #36281 -- Used async-safe write in ASGIHandler.read_body().

2025-05-04T12:53:08Z

Thanks Carlton Gibson for reviews.

Fixed warnings per flake8 7.2.0.

2025-03-30T15:54:15Z

https://github.com/PyCQA/flake8/releases/tag/7.2.0

Refs #33735 -- Captured stderr during ASGITest.test_file_response.

2024-11-27T10:00:05Z

Refs #35059 -- Used asyncio.Event in ASGITest.test_asyncio_cancel_error to enforce specific interleaving.

2024-05-28T17:36:34Z

Sleep call leads to a hard to trace error in CI. Using an Event is more deterministic, and should be less prone to environment variations. Bug in 11393ab1316f973c5fbb534305750740d909b4e4.