The flaw resides in the handling of the HTTP_PROXY environment variable by the urllib.request module, used internally by the HTTP server and client. When processing a maliciously crafted HTTP request ...

$ python securityheaders.py --help usage: securityheaders.py [-h] [--max-redirects N] URL Check HTTP security headers positional arguments: URL Target URL optional arguments: -h, --help show this help ...

Typed, validated HTTP headers for Python. Each header is an immutable dataclass whose fields are the structured components of the header. abnf grammars are used both to parse incoming header strings ...