diff options
| author | Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> | 2023-05-03 04:27:04 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-03 04:27:04 (GMT) |
| commit | 4536b2ec18d0e58e8e4b3167643966c8438775af (patch) | |
| tree | 37f688940d6ccbf314ffc50c2635752b118e7a14 /Misc | |
| parent | 5386730cdd3f2da88e485220dc9fb606f5082430 (diff) | |
| download | cpython-4536b2ec18d0e58e8e4b3167643966c8438775af.zip cpython-4536b2ec18d0e58e8e4b3167643966c8438775af.tar.gz cpython-4536b2ec18d0e58e8e4b3167643966c8438775af.tar.bz2 | |
[3.11] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104123)
gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067)
Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)
---------
(cherry picked from commit c7c3a60c88de61a79ded9fdaf6bc6a29da4efb9a)
Co-authored-by: Ethan Furman <ethan@stoneleaf.us>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst b/Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst new file mode 100644 index 0000000..969deb2 --- /dev/null +++ b/Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst @@ -0,0 +1,2 @@ +Do not expose the local on-disk location in directory indexes +produced by :class:`http.client.SimpleHTTPRequestHandler`. |