]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (#104067)
authorEthan Furman <ethan@stoneleaf.us>
Wed, 3 May 2023 03:42:00 +0000 (20:42 -0700)
committerGitHub <noreply@github.com>
Wed, 3 May 2023 03:42:00 +0000 (03:42 +0000)
commitc7c3a60c88de61a79ded9fdaf6bc6a29da4efb9a
treed36dfffa5974a55a36fcda2e178a25a2081704d3
parent292076a9aa29aba1023340a0d24252a7b27a454e
gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (#104067)

Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)

---------

Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
Lib/http/server.py
Lib/test/test_httpservers.py
Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst [new file with mode: 0644]