summaryrefslogtreecommitdiffstats
path: root/Lib/http/server.py
diff options
context:
space:
mode:
authorNed Deily <nad@acm.org>2014-07-13 05:06:26 (GMT)
committerNed Deily <nad@acm.org>2014-07-13 05:06:26 (GMT)
commit915a30fb0db8d4fc09cdf2f91db103edb5ad2cef (patch)
treeee9db54b270845dfcc1d469a3bd79be415f30429 /Lib/http/server.py
parent314dc126ce45a5e1369b408645e5da480a05bc9d (diff)
downloadcpython-915a30fb0db8d4fc09cdf2f91db103edb5ad2cef.zip
cpython-915a30fb0db8d4fc09cdf2f91db103edb5ad2cef.tar.gz
cpython-915a30fb0db8d4fc09cdf2f91db103edb5ad2cef.tar.bz2
Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435. Patch by Zach Byrne.
Diffstat (limited to 'Lib/http/server.py')
-rw-r--r--Lib/http/server.py10
1 files changed, 5 insertions, 5 deletions
diff --git a/Lib/http/server.py b/Lib/http/server.py
index 1f4d1bb..b0548cf 100644
--- a/Lib/http/server.py
+++ b/Lib/http/server.py
@@ -969,16 +969,16 @@ class CGIHTTPRequestHandler(SimpleHTTPRequestHandler):
def run_cgi(self):
"""Execute a CGI script."""
dir, rest = self.cgi_info
-
- i = rest.find('/')
+ path = dir + '/' + rest
+ i = path.find('/', len(dir)+1)
while i >= 0:
- nextdir = rest[:i]
- nextrest = rest[i+1:]
+ nextdir = path[:i]
+ nextrest = path[i+1:]
scriptdir = self.translate_path(nextdir)
if os.path.isdir(scriptdir):
dir, rest = nextdir, nextrest
- i = rest.find('/')
+ i = path.find('/', len(dir)+1)
else:
break