1. 11 8月, 2023 1 次提交
    • B
      http1connection: Make content-length parsing more strict · 217295b1
      Ben Darnell 提交于
      Content-length and chunk size parsing now strictly matches the RFCs.
      We previously used the python int() function which accepted leading
      plus signs and internal underscores, which are not allowed by the
      HTTP RFCs (it also accepts minus signs, but these are less problematic
      in this context since they'd result in errors elsewhere)
      
      It is important to fix this because when combined with certain proxies,
      the lax parsing could result in a request smuggling vulnerability (if
      both Tornado and the proxy accepted an invalid content-length but
      interpreted it differently). This is known to occur with old versions
      of haproxy, although the current version of haproxy is unaffected.
      217295b1
  2. 01 7月, 2021 1 次提交
  3. 16 3月, 2021 6 次提交
  4. 01 11月, 2020 1 次提交
  5. 27 9月, 2020 1 次提交
  6. 15 5月, 2020 1 次提交
  7. 14 5月, 2020 1 次提交
  8. 06 10月, 2019 1 次提交
  9. 08 9月, 2019 2 次提交
  10. 12 8月, 2019 1 次提交
  11. 17 6月, 2019 1 次提交
    • R
      mypy: Enable no_implicit_optional · c50aed0f
      Robin Roth 提交于
      "Implicit-optional" mode is on by default, but that default is intended to change in the indefinite future (python/peps#689, python/typing#275). Go ahead and change to the future explicit use of Optional.
      c50aed0f
  12. 02 3月, 2019 1 次提交
    • B
      Fix importability on python 3.5.2 · 61e1dbf9
      Ben Darnell 提交于
      The "provisional" typing module in 3.5.2 is kind of broken/incomplete
      so we need to use more forward references to avoid confusing it. The
      significance of this version in particular is that it was the one
      included in ubuntu 16.04.
      
      Fixes #2604
      61e1dbf9
  13. 02 1月, 2019 1 次提交
  14. 29 12月, 2018 1 次提交
    • B
      testing: Cancel all pending coroutines in tearDown · a237a995
      Ben Darnell 提交于
      It's difficult to synchronize test shutdown with the exits of all
      coroutines, so explicitly cancel all native coroutines (which are
      spammy when allowed to be GC'd).
      
      Suppress logging of CancelledErrors in IOLoop.
      a237a995
  15. 10 12月, 2018 1 次提交
    • G
      Use 'future_add_done_callback' to add callback. · 9a4a6ce9
      garenchan 提交于
      The PR #2449 was incomplete, it omited consideration of another
      branch of the 'flush' method. In short, the future returned by
      'RequestHandler.finish()' may also be the return value of
      'HTTP1Connection.write()'. So we should make the same change to
      'HTTP1Connection.write()'.
      
      Fix #2448.
      9a4a6ce9
  16. 03 11月, 2018 1 次提交
  17. 14 10月, 2018 1 次提交
  18. 07 10月, 2018 1 次提交
    • B
      *: Adopt black as code formatter · 72026c5e
      Ben Darnell 提交于
      It occasionally makes some odd-looking decisions and uses a lot of
      vertical space but overall it's a big improvement, especially for the
      dense type signatures.
      72026c5e
  19. 30 9月, 2018 1 次提交
  20. 10 9月, 2018 1 次提交
  21. 20 7月, 2018 1 次提交
  22. 15 7月, 2018 3 次提交
  23. 27 4月, 2018 1 次提交
  24. 22 4月, 2018 1 次提交
  25. 12 3月, 2018 1 次提交
  26. 07 1月, 2018 1 次提交
  27. 05 1月, 2018 3 次提交
  28. 03 1月, 2018 1 次提交
    • P
      style fix: misc indent flake warnings · 0a1565ab
      Pierce Lopez 提交于
      E126 continuation line over-indented for hanging indent
      E128 continuation line under-indented for visual indent
      E129 visually indented line with same indent as next logical line
      0a1565ab
  29. 31 12月, 2017 1 次提交
  30. 26 12月, 2017 1 次提交