Lax cookie parsing in http.cookies could be a security issue when combined
with non-standard cookie handling in some Web browsers.

Reported by Sergey Bobrov.
Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces.
Issue #22419: Limit the length of incoming HTTP request in wsgiref server to 65536 bytes.
cleanup overflowing handling in unicode_decode_call_errorhandler and unicode_encode_ucs1 (closes #22518)
NEWS issue for #22518
fix overflow checking in PyBytes_Repr (closes #22519)
these variables ought to be Py_ssize_t
clear BufferedRWPair weakrefs on deallocation (closes #22517)
prevent overflow in unicode_repr (closes #22520)