requests / requests-kerberos

An authentication handler for using Kerberos with Python Requests.
Other
289 stars 101 forks source link

Fix negotiate regex patter #164

Closed jborean93 closed 3 years ago

jborean93 commented 3 years ago

Updates the regex pattern to avoid a DoS attack against the client trying to perpetually scan the header. This is the same change that requests-gssapi has implemented without any side affects so far https://github.com/pythongssapi/requests-gssapi/pull/22.

Fixes https://github.com/requests/requests-kerberos/issues/145 Fixes https://github.com/requests/requests-kerberos/issues/152