Security fixes in Degu 0.9

Written for Degu by Jason Gerard DeRose on 2014-09-29

Degu 0.9 now carefully restricts what bytes are allowed to exist in the HTTP preamble, and in particular it prevents the NUL byte (b'\x00') from being included in any decoded `str` objects (which could then round-trip back to `bytes` objects).

For more details, please see:
http://docs.novacut.com/degu/changelog.html#september-2014

And see:
http://docs.novacut.com/degu/security.html

Read more

Read all announcements