Ticket #790: cp3_no_content_type2.patch

cherrypy/_cprequest.py

@@ -685 +685 @@
-        # FieldStorage only recognizes POST, so fake it.
-        methenv = {'REQUEST_METHOD': "POST"}
-        try:
+            # If the headers are missing "Content-Type" then add one
+            # with an empty ("") value.  This ensures that FieldStorage
+            # won't parse the request body for params if the client
+            # didn't provide a "Content-Type" header.
+            # A copy of the headers is passed to FieldStorage so that
+            # we leave the original set unmodified.
+            h = http.HeaderMap(self.headers.items())
+            h.setdefault('Content-Type', '')
+            
-            forms = _cpcgifs.FieldStorage(fp=self.rfile,
-self.headers
+h
-                                          environ=methenv,
-                                          keep_blank_values=1)
-        except http.MaxSizeExceeded: