]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.7] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sat, 27 May 2023 06:41:46 +0000 (23:41 -0700)
committerGitHub <noreply@github.com>
Sat, 27 May 2023 06:41:46 +0000 (02:41 -0400)
commit4e2dd0c3626649224b87b757a292959d94152a00
tree4e19c0ced88f2e3b3369c6830b5872850ca49e66
parente168f83f270331866b8a7534a323f90338f13702
[3.7] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104122)

Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)

(cherry picked from commit c7c3a60c88de61a79ded9fdaf6bc6a29da4efb9a)

Co-authored-by: Ethan Furman <ethan@stoneleaf.us>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
Lib/http/server.py
Lib/test/test_httpservers.py
Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst [new file with mode: 0644]