Reject all RFC 9110 forbidden control characters in outbound headers
#12689Comparing
rodrigobnogueira:harden/reject-forbidden-ctls-in-headers
(224ab50
) withmaster
(d2c203f
)0%
- Untouched
- 72
- Skipped
- 72
Benchmarks
144 total
test_client_send_large_websocket_compressed_messages[zlib_ng.zlib_ng]
tests/test_benchmarks_client_ws.py+9%
30 ms27.5 ms
test_ten_compressed_responses_iter_chunked_1mb[isal.isal_zlib]
tests/test_benchmarks_client.py+2%
54.9 ms53.7 ms
test_ten_compressed_responses_iter_chunked_1mb[zlib_ng.zlib_ng]
tests/test_benchmarks_client.py+2%
63.9 ms62.5 ms
test_send_one_hundred_websocket_text_messages_with_mask
tests/test_benchmarks_http_websocket.py+1%
838.4 µs826.3 µs
test_resolve_gitapi_subapps
tests/test_benchmarks_web_urldispatcher.py+1%
181.9 ms180.5 ms
test_one_thousand_round_trip_websocket_binary_messages[large]
tests/test_benchmarks_client_ws.py+1%
102.4 ms101.7 ms
test_resolve_prefix_resources_many_prefix_many_plain
tests/test_benchmarks_web_urldispatcher.py+1%
4.9 ms4.9 ms
test_one_thousand_large_round_trip_websocket_text_messages
tests/test_benchmarks_client_ws.py0%
21.1 ms21 ms
test_get_request_with_251308_compressed_chunked_payload[isal.isal_zlib]
tests/test_benchmarks_client.py0%
74.1 ms73.7 ms
test_read_one_hundred_websocket_text_messages
tests/test_benchmarks_http_websocket.py0%
209.6 µs208.7 µs
test_ten_streamed_responses_iter_chunks
tests/test_benchmarks_client.py0%
120.2 ms119.7 ms
test_one_thousand_round_trip_websocket_binary_messages[small]
tests/test_benchmarks_client_ws.py0%
16.4 ms16.4 ms
test_send_one_hundred_websocket_text_messages
tests/test_benchmarks_http_websocket.py0%
591.9 µs589.9 µs
test_read_large_binary_websocket_messages
tests/test_benchmarks_http_websocket.py0%
45.1 µs44.9 µs
test_get_request_with_251308_compressed_chunked_payload[zlib_ng.zlib_ng]
tests/test_benchmarks_client.py0%
217.6 ms216.9 ms
test_simple_web_file_sendfile_fallback_response
tests/test_benchmarks_web_fileresponse.py0%
88.7 ms88.5 ms
test_read_compressed_post_body[isal.isal_zlib]
tests/test_benchmarks_web_request.py0%
29.8 ms29.7 ms
test_one_thousand_round_trip_websocket_text_messages
tests/test_benchmarks_client_ws.py0%
16.8 ms16.8 ms
test_read_compressed_post_body[zlib]
tests/test_benchmarks_web_request.py0%
42.3 ms42.3 ms
test_ten_streamed_responses_iter_chunked_4096
tests/test_benchmarks_client.py0%
36.1 ms36.1 ms
test_send_one_hundred_websocket_compressed_messages[isal.isal_zlib]
tests/test_benchmarks_http_websocket.py0%
4.6 ms4.6 ms
test_ten_streamed_responses_iter_chunked_1mb
tests/test_benchmarks_client.py0%
690.8 ms690.7 ms
test_client_send_large_websocket_compressed_messages[zlib]
tests/test_benchmarks_client_ws.py0%
50.4 ms50.4 ms
Commits
Click on a commit to change the comparison rangeBase
master
d2c203f
-0.3%
Reject all RFC 9110 forbidden control characters in outbound headers
854d236
8 hours ago
by rodrigobnogueira+0.05%
Update threat model for GHSA-xjx4-5hx2-2cv8
224ab50
7 hours ago
by rodrigobnogueira