From eb0603b855bb3928f34e3bff391e3a40fab95265 Mon Sep 17 00:00:00 2001 From: AN Long Date: Mon, 4 Mar 2024 19:54:38 +0800 Subject: gh-104711: Add security warning to the CGIHTTPRequestHandler document (GH-115915) (cherry picked from commit dac8ff4c401f75e65a5eef1514f2d7987e63bbfe) --- Doc/library/http.server.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst index eb3a6a8..e6d3bb4 100644 --- a/Doc/library/http.server.rst +++ b/Doc/library/http.server.rst @@ -507,6 +507,12 @@ the ``--cgi`` option:: python -m http.server --cgi +.. warning:: + + :class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option + are not intended for use by untrusted clients and may be vulnerable + to exploitation. Always use within a secure environment. + .. _http.server-security: Security Considerations -- cgit v0.12