mirror/tiangolo.fastapi - tiangolo.fastapi - Всем привет, ну это уж ваше дело

python asyncio api async fastapi framework json json-schema openapi openapi3 pydantic python-types python3 redoc rest starlette swagger swagger-ui uvicorn web

History

hemanthvnp 021bcb060e Fix: validate event and id fields in format_sse_event to prevent SSE protocol injection PR #15588 added validation to ServerSentEvent, but the public format_sse_event() function accepted multi-line values for event and id without raising an error. A newline in either field splits into extra SSE lines, allowing callers who pass user-supplied data directly to format_sse_event() to unintentionally inject arbitrary SSE fields. Reuse the existing _check_event_single_line and _check_id_valid helpers at the top of format_sse_event so the two entry points enforce the same rules. Add eight parametrised tests covering \n, \r, \r\n and \0 in both fields, plus an end-to-end injection scenario.		5 days ago
..
.agents/skills/fastapi	📝 Update Skill, optimize context, trim and refactor into references (#15031)	3 months ago
_compat	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
dependencies	♻️ Do not accept underscore headers when using `convert_underscores=True` (the default) (#15589)	2 weeks ago
middleware	📝 Use `WSGIMiddleware` from `a2wsgi` instead of deprecated `fastapi.middleware.wsgi.WSGIMiddleware` (#14756)	4 months ago
openapi	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
security	✏️ Fix typo for `client_secret` in OAuth2 form docstrings (#14946)	2 months ago
__init__.py	🔖 Release version 0.136.3	2 weeks ago
__main__.py	♻️ Add support for `pip install "fastapi[standard]"` with standard dependencies and `python -m fastapi` (#11935)	2 years ago
applications.py	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
background.py	🎨 Update internal types for Python 3.10 (#14898)	4 months ago
cli.py	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
concurrency.py	♻️ Upgrade internal syntax to Python 3.9+ 🎉 (#14564)	6 months ago
datastructures.py	👷 Add `ty` to precommit (#15091)	3 months ago
encoders.py	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
exception_handlers.py	⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.49.0 (#14077)	9 months ago
exceptions.py	🎨 Update internal types for Python 3.10 (#14898)	4 months ago
logger.py	🔊 Refactor logging (#781)	7 years ago
param_functions.py	👷 Add `ty` to precommit (#15091)	3 months ago
params.py	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
py.typed	✨ add py.typed to ship typing information (#209)	7 years ago
requests.py	⬆ Require Pydantic > 1.0 (#1862)	6 years ago
responses.py	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
routing.py	⬆ Bump ty from 0.0.21 to 0.0.34 (#15443)	3 weeks ago
sse.py	Fix: validate event and id fields in format_sse_event to prevent SSE protocol injection	5 days ago
staticfiles.py	✨ Improve type annotations, add support for mypy --strict, internally and for external packages (#2547)	6 years ago
templating.py	✨ Improve type annotations, add support for mypy --strict, internally and for external packages (#2547)	6 years ago
testclient.py	✨ Improve type annotations, add support for mypy --strict, internally and for external packages (#2547)	6 years ago
types.py	🎨 Update internal types for Python 3.10 (#14898)	4 months ago
utils.py	🎨 Update internal types for Python 3.10 (#14898)	4 months ago
websockets.py	✨ Export `WebSocketState` in `fastapi.websockets` (#4376)	4 years ago