From: Felipe Rodrigues <felipe@felipevr.com>
Date: Thu, 11 Oct 2018 02:43:40 +0000 (-0300)
Subject: bpo-34576 warn users on security for http.server (#9720)
X-Git-Tag: v3.8.0a1~797
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1d26c72e6a9c5b28b27c158f2f196217707dbb0f;p=thirdparty%2FPython%2Fcpython.git

bpo-34576 warn users on security for http.server (#9720)

It was proposed to add an warning for http.server regarding security
issues. The wording was provided at bpo-26005 by @orsenthil
---

diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst
index 0bd7f778cec0..0b93c62288b1 100644
--- a/Doc/library/http.server.rst
+++ b/Doc/library/http.server.rst
@@ -16,6 +16,14 @@
 
 This module defines classes for implementing HTTP servers (Web servers).
 
+Security Considerations
+-----------------------
+
+http.server is meant for demo purposes and does not implement the stringent
+security checks needed of real HTTP server. We do not recommend
+using this module directly in production.
+
+
 One class, :class:`HTTPServer`, is a :class:`socketserver.TCPServer` subclass.
 It creates and listens at the HTTP socket, dispatching the requests to a
 handler.  Code to create and run the server looks like this::