summaryrefslogtreecommitdiffstats
path: root/Doc/lib/libcgi.tex
diff options
context:
space:
mode:
authorAlex Martelli <aleaxit@gmail.com>2003-11-09 16:31:18 (GMT)
committerAlex Martelli <aleaxit@gmail.com>2003-11-09 16:31:18 (GMT)
commit50324a604c3f3c83fcbc4eb6a4783b26a0bcb5a6 (patch)
treeceb6595c6a377ad0c654ac71b5bf4ab091b580ea /Doc/lib/libcgi.tex
parent35d8360bf7692d15292e4122d608aea1cddd46b1 (diff)
downloadcpython-50324a604c3f3c83fcbc4eb6a4783b26a0bcb5a6.zip
cpython-50324a604c3f3c83fcbc4eb6a4783b26a0bcb5a6.tar.gz
cpython-50324a604c3f3c83fcbc4eb6a4783b26a0bcb5a6.tar.bz2
Avoid giving advice that's bad for security, as per SF bug #823515
(same as commit of Sun Nov 2 to the release23-maint branch)
Diffstat (limited to 'Doc/lib/libcgi.tex')
-rw-r--r--Doc/lib/libcgi.tex4
1 files changed, 3 insertions, 1 deletions
diff --git a/Doc/lib/libcgi.tex b/Doc/lib/libcgi.tex
index 055f66c..add322d 100644
--- a/Doc/lib/libcgi.tex
+++ b/Doc/lib/libcgi.tex
@@ -598,7 +598,9 @@ Usually, this means using absolute path names --- \envvar{PATH} is
usually not set to a very useful value in a CGI script.
\item When reading or writing external files, make sure they can be read
-or written by every user on the system.
+or written by the userid under which your CGI script will be running:
+this is typically the userid under which the web server is running, or some
+explicitly specified userid for a web server's \samp{suexec} feature.
\item Don't try to give a CGI script a set-uid mode. This doesn't work on
most systems, and is a security liability as well.