#29800: Django hangs when Content-Length has incorrect value
------------------------------------+------------------------------------
Reporter: Alexander Charykov | Owner: (none)
Type: Bug | Status: new
Component: HTTP handling | Version: 2.1
Severity: Normal | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
------------------------------------+------------------------------------
Old description:
> When sending incorrect content-length header to application, django hangs
> on reading request.body.
>
> Steps to reproduce:
>
> curl -v -X POST -H "Accept: */*" -H "Content-Length: 22" -d "1"
> http://127.0.0.1:8000
>
> with following handler:
> {{{#!python
> def index(request):
> return HttpResponse(content=request.body)
> }}}
New description:
When sending incorrect content-length header to application, django hangs
on reading request.body.
Steps to reproduce:
curl -v -X POST -H "Accept: */*" -H "Content-Length: 22" -d "1"
http://127.0.0.1:8000
with following handler:
{{{#!python
from django.http import HttpResponse
from django.views.decorators.csrf import csrf_exempt
@csrf_exempt
def index(request):
return HttpResponse(content=request.body)
}}}
--
Comment (by Manan):
Added a csrf_exempt to bypass the default 403 CSRF error page
--
Ticket URL: <https://code.djangoproject.com/ticket/29800#comment:11>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/066.d4f02dce9c5ff6d353b8b879191fd991%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
