Skip to content

Conversation

@GSVarsha
Copy link
Contributor

@GSVarsha GSVarsha commented Dec 15, 2025

HTTPHeaders._dict has been removed in the latest version: tornado-6.5.3. Using the documented HTTPHeaders interface instead.

Tornado normalizes keys to Http‑Header‑Case for presentation, e.g., Content-Type, X-Instana-T. Thus, in fails while get() works because the latter normalizes the input before lookup.

Verified the changes on all the supported versions of Tornado :)

Important

Tornado has fixed a couple of CVEs in this version!

- Use the documented `HTTPHeaders` interface instead

Signed-off-by: Varsha GS <varsha.gs@ibm.com>
- `in` fails while `get()` works—the latter normalizes the input before lookup.

Signed-off-by: Varsha GS <varsha.gs@ibm.com>
@GSVarsha GSVarsha added this to the H1-2026 milestone Dec 15, 2025
@GSVarsha GSVarsha self-assigned this Dec 15, 2025
@GSVarsha GSVarsha added WIP work in progress do NOT merge Depends on another PR or WIP currency Keeping supported versions updated. ci/cd fix and removed WIP work in progress do NOT merge Depends on another PR or WIP labels Dec 15, 2025
@GSVarsha GSVarsha marked this pull request as ready for review December 15, 2025 08:45
@GSVarsha GSVarsha requested a review from a team as a code owner December 15, 2025 08:45
Copy link
Contributor

@CagriYonca CagriYonca left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me!

@CagriYonca CagriYonca merged commit 770b298 into main Dec 15, 2025
21 checks passed
@CagriYonca CagriYonca deleted the fix-tornado-653 branch December 15, 2025 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/cd currency Keeping supported versions updated. fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants