From: AN Long <aisk@users.noreply.github.com>
Date: Mon, 4 Mar 2024 11:54:46 +0000 (+0800)
Subject: gh-104711: Add security warning to the CGIHTTPRequestHandler document (GH-115915)
X-Git-Tag: v3.11.9~105
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b6077aaf12e5d1cbbe9d721a3f3baefc4d8991e5;p=thirdparty%2FPython%2Fcpython.git

gh-104711: Add security warning to the CGIHTTPRequestHandler document (GH-115915)

(cherry picked from commit dac8ff4c401f75e65a5eef1514f2d7987e63bbfe)
---

diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst
index c42103599d1f..89c1756c4354 100644
--- a/Doc/library/http.server.rst
+++ b/Doc/library/http.server.rst
@@ -502,6 +502,12 @@ the ``--cgi`` option::
 
         python -m http.server --cgi
 
+.. warning::
+
+   :class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option
+   are not intended for use by untrusted clients and may be vulnerable
+   to exploitation. Always use within a secure environment.
+
 .. _http.server-security:
 
 Security Considerations