]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e277266) | patch
[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 9 May 2023 15:21:53 +0000 (08:21 -0700)
committerGitHub <noreply@github.com>
Tue, 9 May 2023 15:21:53 +0000 (15:21 +0000)
commitd77e77c363a170f4435cbe826628b6a347654d9e
treecc7ad763e443e31171bf7bc6f6921e0dd33fd0e9tree | snapshot
parente277266a926a9037d39f1af7751050012f7f1998commit | diff
[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104119)

gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067)

Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)

---------

(cherry picked from commit c7c3a60c88de61a79ded9fdaf6bc6a29da4efb9a)

Co-authored-by: Ethan Furman <ethan@stoneleaf.us>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
Lib/http/server.py diff | blob | blame | history
Lib/test/test_httpservers.py diff | blob | blame | history
Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git