https://github.com/python/cpython/commit/6e9da0919c430628ce4cb9c6b14273bc62cf346f
commit: 6e9da0919c430628ce4cb9c6b14273bc62cf346f
branch: 3.13
author: Miss Islington (bot) <[email protected]>
committer: StanFromIreland <[email protected]>
date: 2026-05-29T20:08:16+01:00
summary:

[3.13] Add a security warning about `pydoc`'s HTTP server (GH-150409)

(cherry picked from commit 5535c1f9c08e929f96fa5d798277e3a2c91ed12a)

Co-authored-by: Stan Ulbrych <[email protected]>

files:
M Doc/library/pydoc.rst

diff --git a/Doc/library/pydoc.rst b/Doc/library/pydoc.rst
index e8f153ee1b35ce..a59793c25159df 100644
--- a/Doc/library/pydoc.rst
+++ b/Doc/library/pydoc.rst
@@ -71,6 +71,11 @@ will start a HTTP server on port 1234, allowing you to 
browse the
 documentation at ``http://localhost:1234/`` in your preferred web browser.
 Specifying ``0`` as the port number will select an arbitrary unused port.
 
+.. warning::
+
+   The :mod:`!pydoc` HTTP server is intended for local use during
+   development and is not suitable for production use.
+
 :program:`python -m pydoc -n <hostname>` will start the server listening at 
the given
 hostname.  By default the hostname is 'localhost' but if you want the server to
 be reached from other machines, you may want to change the host name that the

_______________________________________________
Python-checkins mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3//lists/python-checkins.python.org
Member address: [email protected]

Reply via email to