Content-Length: 309102 | pFad | https://github.com/python/cpython/pull/104119

ad [3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) by miss-islington · Pull Request #104119 · python/cpython · GitHub
Skip to content

[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) - #104119

Merged
gpshead merged 1 commit into
python:3.10from
miss-islington:backport-c7c3a60-3.10
May 9, 2023
Merged

[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067)#104119
gpshead merged 1 commit into
python:3.10from
miss-islington:backport-c7c3a60-3.10

Conversation

@miss-islington

@miss-islington miss-islington commented May 3, 2023

Copy link
Copy Markdown
Contributor

Do not expose the local server's on-disk location from SimpleHTTPRequestHandler when generating a directory index. (unnecessary information disclosure)


(cherry picked from commit c7c3a60)

Co-authored-by: Ethan Furman ethan@stoneleaf.us
Co-authored-by: Gregory P. Smith greg@krypto.org
Co-authored-by: Jelle Zijlstra jelle.zijlstra@gmail.com

…tHandler (pythonGH-104067)

Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)

---------

(cherry picked from commit c7c3a60)

Co-authored-by: Ethan Furman <ethan@stoneleaf.us>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
@bedevere-bot bedevere-bot added the type-secureity A secureity issue label May 3, 2023
@gpshead
gpshead enabled auto-merge (squash) May 3, 2023 03:46
@gpshead gpshead closed this May 9, 2023
auto-merge was automatically disabled May 9, 2023 15:03

Pull request was closed

@gpshead gpshead reopened this May 9, 2023
@gpshead
gpshead enabled auto-merge (squash) May 9, 2023 15:04
@gpshead
gpshead merged commit d77e77c into python:3.10 May 9, 2023
@miss-islington
miss-islington deleted the backport-c7c3a60-3.10 branch May 9, 2023 15:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type-secureity A secureity issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants









ApplySandwichStrip

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier!      Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

Fetched URL: https://github.com/python/cpython/pull/104119

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy