[3.7] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) by miss-islington · Pull Request #104122 · python/cpython

Skip to content

Navigation Menu

Sign in

Appearance settings

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up

Appearance settings

Conversation

@miss-islington

Copy link

Contributor

@miss-islington miss-islington commented

May 3, 2023

edited by bedevere-bot

Loading

Do not expose the local server's on-disk location from SimpleHTTPRequestHandler when generating a directory index. (unnecessary information disclosure)


(cherry picked from commit c7c3a60)

Co-authored-by: Ethan Furman ethan@stoneleaf.us
Co-authored-by: Gregory P. Smith greg@krypto.org
Co-authored-by: Jelle Zijlstra jelle.zijlstra@gmail.com

…tHandler (pythonGH-104067)

Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)

---------

(cherry picked from commit c7c3a60)

Co-authored-by: Ethan Furman <ethan@stoneleaf.us>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>

@arhadthedev

Copy link

Member

Is there anything preventing the 3.7-3.9 backports from being merged?

@ned-deily

Copy link

Member

Not to worry, they'll get merged before the next security releases.

arhadthedev reacted with thumbs up emoji

@ned-deily ned-deily merged commit 4e2dd0c into python:3.7

May 27, 2023

@miss-islington miss-islington deleted the backport-c7c3a60-3.7 branch

May 27, 2023 06:41

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@ned-deily ned-deily

Labels

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

6 participants

@miss-islington @arhadthedev @ned-deily @gpshead @bedevere-bot @ethanfurman