Upgrading aiohttp 0.12 to 0.13
Review needed0.12.0 → 0.13.1Security1New4Changed2Fixed3
Review neededUpgrade verdict
2 changed defaults and a security fix.
In plain terms
- Error pages now escape traceback text so it cannot be interpreted as HTML.
Must act 1 item needs code or config changes
What you must change
Security1
HTML-escapes traceback text in ServerHttpProtocol.handle_error.
ServerHttpProtocol.handle_error