Closed pamella closed 3 months ago
Drop django-debreach due to the breach attach mitigation (HTB) added in django 4.2
django-debreach
https://docs.djangoproject.com/en/5.0/ref/middleware/\#django.middleware.gzip.GZipMiddleware
Resolves #665
"django.middleware.gzip.GZipMiddleware"
gzip
Content-Encoding
Content-Length
Screencast from 27-05-2024 15:31:49.webm
Description
Drop
django-debreach
due to the breach attach mitigation (HTB) added in django 4.2https://docs.djangoproject.com/en/5.0/ref/middleware/\#django.middleware.gzip.GZipMiddleware
Motivation and Context
Resolves #665
Screenshots (if appropriate):
Steps to reproduce (if appropriate):
"django.middleware.gzip.GZipMiddleware"
to a testing django app, and make sure requests are usinggzip
asContent-Encoding
and theContent-Length
is now changing randomly for the same request.Screencast from 27-05-2024 15:31:49.webm
Types of changes
Checklist: