diff options
| author | Martin Panter <vadmium+py@gmail.com> | 2016-04-18 03:45:18 (GMT) |
|---|---|---|
| committer | Martin Panter <vadmium+py@gmail.com> | 2016-04-18 03:45:18 (GMT) |
| commit | d274b3f1f1e2d8811733fb952c9f18d7da3a376a (patch) | |
| tree | 891261fc059068092ffa9e906c2a85c78f559520 /Misc | |
| parent | 6aafbd433dbca6c11f41f1fc55d4304d2d98d6f5 (diff) | |
| download | cpython-d274b3f1f1e2d8811733fb952c9f18d7da3a376a.zip cpython-d274b3f1f1e2d8811733fb952c9f18d7da3a376a.tar.gz cpython-d274b3f1f1e2d8811733fb952c9f18d7da3a376a.tar.bz2 | |
Issue #26657: Fix Windows directory traversal vulnerability with http.server
Based on patch by Philipp Hagemeister. This fixes a regression caused by
revision f4377699fd47.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -107,6 +107,10 @@ Core and Builtins Library ------- +- Issue #26657: Fix directory traversal vulnerability with http.server on + Windows. This fixes a regression that was introduced in 3.3.4rc1 and + 3.4.0rc1. Based on patch by Philipp Hagemeister. + - Issue #26717: Stop encoding Latin-1-ized WSGI paths with UTF-8. Patch by Anthony Sottile. |