From d0e7b01e0dbedd7a5670728e5a805edb5c13782d Mon Sep 17 00:00:00 2001 From: Anil Sahoo Date: Thu, 26 Mar 2026 15:07:42 +0530 Subject: [PATCH 1/4] Fixed python & feature test failures caused by Werkzeug 3.1.7 rejecting empty Host header in CSRF token generation. --- web/regression/python_test_utils/csrf_test_client.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/web/regression/python_test_utils/csrf_test_client.py b/web/regression/python_test_utils/csrf_test_client.py index 17d3456ea8e..3692b4cef16 100644 --- a/web/regression/python_test_utils/csrf_test_client.py +++ b/web/regression/python_test_utils/csrf_test_client.py @@ -94,7 +94,8 @@ def generate_csrf_token(self, *args, **kwargs): # powers `flask.session`, # and make a test request context that has those cookies in it. environ_overrides = { - 'wsgi.url_scheme': '' + 'wsgi.url_scheme': 'http', + 'HTTP_HOST': 'localhost', } self._add_cookies_to_wsgi(environ_overrides) From 9dda9ff0dfbad1319d6205947f38779d9369957d Mon Sep 17 00:00:00 2001 From: Anil Sahoo Date: Thu, 26 Mar 2026 15:25:03 +0530 Subject: [PATCH 2/4] Update web/regression/python_test_utils/csrf_test_client.py Co-authored-by: Khushboo Vashi --- web/regression/python_test_utils/csrf_test_client.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/regression/python_test_utils/csrf_test_client.py b/web/regression/python_test_utils/csrf_test_client.py index 3692b4cef16..5ea2cb118e6 100644 --- a/web/regression/python_test_utils/csrf_test_client.py +++ b/web/regression/python_test_utils/csrf_test_client.py @@ -95,7 +95,7 @@ def generate_csrf_token(self, *args, **kwargs): # and make a test request context that has those cookies in it. environ_overrides = { 'wsgi.url_scheme': 'http', - 'HTTP_HOST': 'localhost', + 'HTTP_HOST': current_app.config["SERVER_NAME"] or "localhost" } self._add_cookies_to_wsgi(environ_overrides) From eadbe673f1a7610e90cadb59408c0305d8b74109 Mon Sep 17 00:00:00 2001 From: Anil Sahoo Date: Thu, 26 Mar 2026 15:29:53 +0530 Subject: [PATCH 3/4] Fixed pep8 issue --- web/regression/python_test_utils/csrf_test_client.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/regression/python_test_utils/csrf_test_client.py b/web/regression/python_test_utils/csrf_test_client.py index 5ea2cb118e6..0c7243a1d50 100644 --- a/web/regression/python_test_utils/csrf_test_client.py +++ b/web/regression/python_test_utils/csrf_test_client.py @@ -95,7 +95,7 @@ def generate_csrf_token(self, *args, **kwargs): # and make a test request context that has those cookies in it. environ_overrides = { 'wsgi.url_scheme': 'http', - 'HTTP_HOST': current_app.config["SERVER_NAME"] or "localhost" + 'HTTP_HOST': current_app.config["SERVER_NAME"] or "localhost" } self._add_cookies_to_wsgi(environ_overrides) From 0073eebbdd7673c73d303cab78f4fa8dc002ac60 Mon Sep 17 00:00:00 2001 From: Anil Sahoo Date: Thu, 26 Mar 2026 17:10:23 +0530 Subject: [PATCH 4/4] Fixed coderabbitai review comments --- web/regression/python_test_utils/csrf_test_client.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/web/regression/python_test_utils/csrf_test_client.py b/web/regression/python_test_utils/csrf_test_client.py index 0c7243a1d50..7489289c739 100644 --- a/web/regression/python_test_utils/csrf_test_client.py +++ b/web/regression/python_test_utils/csrf_test_client.py @@ -93,9 +93,10 @@ def generate_csrf_token(self, *args, **kwargs): # this test client, such as the secure cookie that # powers `flask.session`, # and make a test request context that has those cookies in it. + server_name = self.app.config.get("SERVER_NAME") or "localhost" environ_overrides = { 'wsgi.url_scheme': 'http', - 'HTTP_HOST': current_app.config["SERVER_NAME"] or "localhost" + 'HTTP_HOST': server_name } self._add_cookies_to_wsgi(environ_overrides)