NotificationsYou must be signed in to change notification settings
Fork32.1k
Star67.3k

[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067)#104119

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

gpshead merged 1 commit intopython:3.10frommiss-islington:backport-c7c3a60-3.10

May 9, 2023

Merged

[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067)#104119

gpshead merged 1 commit intopython:3.10frommiss-islington:backport-c7c3a60-3.10

May 9, 2023

Conversation

Copy link

Contributor

miss-islington commentedMay 3, 2023•
edited by bedevere-bot
Loading

Do not expose the local server's on-disk location fromSimpleHTTPRequestHandler when generating a directory index. (unnecessary information disclosure)

(cherry picked from commitc7c3a60)

Co-authored-by: Ethan Furmanethan@stoneleaf.us
Co-authored-by: Gregory P. Smithgreg@krypto.org
Co-authored-by: Jelle Zijlstrajelle.zijlstra@gmail.com

Issue:python 3.11 http.server internal path disclosure #104049

pythongh-104049: do not expose on-disk location from SimpleHTTPReques…

7222d2e

…tHandler (pythonGH-104067)Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)---------(cherry picked from commitc7c3a60)Co-authored-by: Ethan Furman <ethan@stoneleaf.us>Co-authored-by: Gregory P. Smith <greg@krypto.org>Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>