https://github.com/python/cpython/commit/eb0603b855bb3928f34e3bff391e3a40fab95265
commit: eb0603b855bb3928f34e3bff391e3a40fab95265
branch: 3.12
author: AN Long <[email protected]>
committer: zooba <[email protected]>
date: 2024-03-04T11:54:38Z
summary:
gh-104711: Add security warning to the CGIHTTPRequestHandler document
(GH-115915)
(cherry picked from commit dac8ff4c401f75e65a5eef1514f2d7987e63bbfe)
files:
M Doc/library/http.server.rst
diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst
index eb3a6a87a11e58..e6d3bb45ef017e 100644
--- a/Doc/library/http.server.rst
+++ b/Doc/library/http.server.rst
@@ -507,6 +507,12 @@ the ``--cgi`` option::
python -m http.server --cgi
+.. warning::
+
+ :class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option
+ are not intended for use by untrusted clients and may be vulnerable
+ to exploitation. Always use within a secure environment.
+
.. _http.server-security:
Security Considerations
_______________________________________________
Python-checkins mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/python-checkins.python.org/
Member address: [email protected]
