mitmproxy/test/mitmproxy
Maximilian Hils b06fb6d157 security: reject whitespace in HTTP/1 header names
This commit fixes GHSA-gcx2-gvj7-pxv3 by making mitmproxy
reject header names that contain whitespace characters by default.
A new `validate_inbound_headers` option is provided to turn this behavior
off at the expense of allowing HTTP smuggling vulnerabilities.
2022-03-19 17:20:32 +01:00
..
addons fix vt code detection on Windows 2022-03-19 17:20:32 +01:00
completion Add dummy directory to completion 2016-06-20 01:24:27 +05:30
contentviews gRPC packed repeated encoding (#4872) 2021-10-21 13:20:13 +02:00
coretypes Fix several DeprecationWarning: invalid escape sequence 2019-01-05 23:37:48 +01:00
data tests++ 2022-03-15 18:43:56 +01:00
io fix tests 2021-12-20 21:06:14 +01:00
net security: reject whitespace in HTTP/1 header names 2022-03-19 17:20:32 +01:00
platform [sans-io] add transparent proxy, improve testing 2020-12-12 21:24:18 +01:00
proxy security: reject whitespace in HTTP/1 header names 2022-03-19 17:20:32 +01:00
script remove pytest.mark.asyncio 2022-03-15 19:50:06 +01:00
tools exit for all tools on startup error, fix #4544 (#5187) 2022-03-16 13:23:32 +00:00
utils fix vt code detection on Windows 2022-03-19 17:20:32 +01:00
__init__.py nuke Pillow 2017-02-15 00:54:14 +01:00
test_addonmanager.py remove pytest.mark.asyncio 2022-03-15 19:50:06 +01:00
test_certs.py Make Cert.not{before,after} timezone aware (#4805) 2021-09-16 10:53:36 +02:00
test_command_lexer.py commands: only accept escaped quotes 2021-07-15 13:12:58 +02:00
test_command.py remove pytest.mark.asyncio 2022-03-15 19:50:06 +01:00
test_connection.py Allow no-op assignments to Server.address when connection open (#4687) 2021-07-19 09:25:21 +00:00
test_ctx.py restructure and move test files 2017-02-14 23:31:37 +01:00
test_eventsequence.py remove websocket_error event, fixes #4674 2021-07-12 16:35:25 +02:00
test_exceptions.py restructure and move test files 2017-02-14 23:31:37 +01:00
test_flow.py remove pytest.mark.asyncio 2022-03-15 19:50:06 +01:00
test_flowfilter.py lint! 2021-10-09 18:34:29 +02:00
test_hooks.py duplicate hooks: warn instead of raise 2021-01-16 20:31:50 +01:00
test_http.py Fixed encoding guessing: only search for meta tags in HTML bodies (#4566) 2022-03-17 14:25:26 +00:00
test_log.py logging: don't pick up later mutations 2021-06-20 02:15:09 +02:00
test_master.py add asyncio exception handler test 2022-03-15 19:59:51 +01:00
test_options.py restructure and move test files 2017-02-14 23:31:37 +01:00
test_optmanager.py Refactor how we process --set options (#5067) 2022-03-16 07:33:30 +00:00
test_proxy.py cleanup old proxy server 2020-12-28 14:33:10 +01:00
test_stateobject.py Add typechecking of Any values for state object 2018-06-17 10:22:17 +12:00
test_taddons.py remove pytest.mark.asyncio 2022-03-15 19:50:06 +01:00
test_tcp.py add individual-coverage check 2017-02-16 11:43:45 +01:00
test_tls.py ClientHello: add .raw_bytes(), refs #4877 (#5075) 2022-01-18 11:34:09 +00:00
test_typemanager.py commands: refactor types 2017-12-18 17:02:48 +13:00
test_types.py quote argument of view.flows.resolve (#4910) 2021-11-19 13:04:20 +01:00
test_version.py fix compat with upcoming cryptography release 2021-10-05 08:19:37 +02:00
test_websocket.py WebSocketMessage.kill() -> .drop() 2021-07-15 14:57:43 +02:00