Debian Patches

Status for python-werkzeug/1.0.1+dfsg1-2+deb11u1

Patch Description Author Forwarded Bugs Origin Last update
drop_ubuntu_font.patch drop_ubuntu_font SVN-Git Migration <python-modules-team@lists.alioth.debian.org> no 2015-10-08
pytest-timeout.patch Don't mark warning as error in pytest during build
We don't have python-pytest-timeout (for Python 2) so we need to ignore
warning about PytestUnknownMarkWarning.
Ondej Nov (onovy@debian.org) no
disable-sphinxcontrib-log_cabinet.patch Disable sphinxcontrib.log_cabinet extension Ondej Nov <onovy@debian.org> no
don-t-strip-leading-when-parsing-cookie.patch don't strip leading = when parsing cookie David Lord <davidism@gmail.com> no debian https://github.com/pallets/werkzeug/commit/8c2b4b82d0cade0d37e6a88e2cd2413878e8ebd4 2023-01-31
limit-the-maximum-number-of-multipart-form-parts.patch limit the maximum number of multipart form parts
Add a limit to the number of multipart form data parts the parser will
attempt to parse. If the limit is exceeded, it raises
`RequestEntityTooLargeError`.

A default of 1000 seems large enough to allow legitimate use cases while
preventing the previous unlimited parsing. This differs from similar
settings that are unset by default, as I think safe defaults are better
practice.

The limit can be adjusted per request by changing it on the request
object before parsing. For example, it can be set based on what you
expect a given endpoint to handle.

```python
req.max_form_parts = 20
form = req.form
```
pgjones <philip.graham.jones@googlemail.com> no debian https://github.com/pallets/werkzeug/commit/fe899d0cdf767a7289a8bf746b7f72c2907a1b4b 2023-01-29

All known versions for source package 'python-werkzeug'

Links