bpo-39603: Prevent header injection in http methods (GH-18485) (GH-21539)

reject control chars in http method in http.client.putrequest to prevent http header injection
(cherry picked from commit 8ca8a2e8)

Co-authored-by: AMIR <31338382+amiremohamadi@users.noreply.github.com>