[PATCH] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel...

[PATCH] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (#145600)

Reject control characters in `http.cookies.Morsel.update()` and `http.cookies.BaseCookie.js_output`.

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Victor Stinner <victor.stinner@gmail.com>
(cherry picked from commit 57e88c1cf95e1481b94ae57abe1010469d47a6b4)

Origin: other, https://github.com/python/cpython/commit/d46a4974216debdd3566b4594e7d02a4370202a7

Gbp-Pq: Name CVE-2026-3644.patch