https://github.com/python/cpython/commit/5535c1f9c08e929f96fa5d798277e3a2c91ed12a commit: 5535c1f9c08e929f96fa5d798277e3a2c91ed12a branch: main author: Stan Ulbrych <[email protected]> committer: StanFromIreland <[email protected]> date: 2026-05-29T13:29:59+01:00 summary:
Add a security warning about `pydoc`'s HTTP server (#150409) files: M Doc/library/pydoc.rst diff --git a/Doc/library/pydoc.rst b/Doc/library/pydoc.rst index f236eba8457657..a0cfb440a36ffa 100644 --- a/Doc/library/pydoc.rst +++ b/Doc/library/pydoc.rst @@ -68,6 +68,11 @@ will start a HTTP server on port 1234, allowing you to browse the documentation at ``http://localhost:1234/`` in your preferred web browser. Specifying ``0`` as the port number will select an arbitrary unused port. +.. warning:: + + The :mod:`!pydoc` HTTP server is intended for local use during + development and is not suitable for production use. + :program:`python -m pydoc -n <hostname>` will start the server listening at the given hostname. By default the hostname is 'localhost' but if you want the server to be reached from other machines, you may want to change the host name that the _______________________________________________ Python-checkins mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3//lists/python-checkins.python.org Member address: [email protected]
