diff options
| author | Nick Pope <nick@nickpope.me.uk> | 2023-01-25 12:21:48 +0100 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2023-02-01 09:45:07 +0100 |
| commit | 8a7b22d4a623bcd95190d2f5a958472fb41e576d (patch) | |
| tree | f238b3367031815eed31422fb7852dcfc1736798 /tests/admin_scripts/tests.py | |
| parent | 5e0be0873ca6fe0c4ad7abe1398443bdf367d16e (diff) | |
[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.
The parsed values of Accept-Language headers are cached in order to
avoid repetitive parsing. This leads to a potential denial-of-service
vector via excessive memory usage if the raw value of Accept-Language
headers is very large.
Accept-Language headers are now limited to a maximum length in order
to avoid this issue.
Diffstat (limited to 'tests/admin_scripts/tests.py')
0 files changed, 0 insertions, 0 deletions