Port the patch from Python 3.6 (f02de961b9) to our stdlib: reject control chars in http method in http.client.putrequest to prevent http header injection.
Due to a massive storm of spam, registration on this instance now requires explicit administrator approval. Sorry for the added friction, we're also looking into automatic filtering options.
Port the patch from Python 3.6 (f02de961b9) to our stdlib: reject control chars in http method in http.client.putrequest to prevent http header injection.