fix: sanitize requestline

2026-05-04 23:02:15 +02:00
parent 65c6145022
commit 3fe33cb348
1 changed files with 12 additions and 2 deletions
@@ -102,7 +102,12 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
            code = color + str(code.value) + logs.TermColor.RESET
        if size == "" and self.out_size > 0:
            size = str(self.out_size)
-        args = (code, self.address_string(), self.host, self.requestline)
+        args = (
+            code,
+            self.address_string(),
+            self.host,
+            re.sub(r"[^\x00-\x7F]+", "?", self.requestline),
+        )
        fmt = "→ %s - %s - %s - %s"
        if size != "":
            args = (*args, size)
@@ -223,7 +228,12 @@ class BaseHandler(abc.ABC, http.server.BaseHTTPRequestHandler):
        )

    def _pre_log_request(self) -> None:  # pragma: no cover
-        args = ("...", self.address_string(), self.host, self.requestline)
+        args = (
+            "...",
+            self.address_string(),
+            self.host,
+            re.sub(r"[^\x00-\x7F]+", "?", self.requestline),
+        )
        fmt = "← %s - %s - %s - %s"
        if self.in_size > 0:
            args = (*args, self.in_size)