Comment on What is a Web Framework?parentComments−js212yYou don't separate the headers from the bodyLooks like it does to me. The content-type is printed with a \n and then Python implicitly adds a second newline. Or did you mean something else?−DasIch12yHm, you're right. Response splitting and with that header injection should still be possible though, I think.In any case having to manually make sure to print newlines in the right places and escape user input in headers correctly is insane.
Comments
You don't separate the headers from the body
Looks like it does to me. The content-type is printed with a \n and then Python implicitly adds a second newline. Or did you mean something else?
Hm, you're right. Response splitting and with that header injection should still be possible though, I think.
In any case having to manually make sure to print newlines in the right places and escape user input in headers correctly is insane.