]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782)
authorVictor Stinner <victor.stinner@gmail.com>
Wed, 12 Jul 2017 12:52:04 +0000 (14:52 +0200)
committerlarryhastings <larry@hastings.org>
Wed, 12 Jul 2017 12:52:04 +0000 (14:52 +0200)
commit6f6bc1da8aaae52664e7747e328d26eb59c0e74f
tree01e1710ceda12d134b740140b31bd9834c5f6aa4
parentcc54c1c0d2d05fe7404ba64c53df4b1352ed2262
bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782)

Based on patch by Philipp Hagemeister.  This fixes a regression caused by
revision f4377699fd47.

(cherry picked from commit d274b3f1f1e2d8811733fb952c9f18d7da3a376a)
Lib/http/server.py
Lib/test/test_httpservers.py
Misc/NEWS.d/next/Security/2017-07-11-22-07-03.bpo-26657.wvpzFD.rst [new file with mode: 0644]