Commit Graph

160 Commits

Author SHA1 Message Date
Martin Panter d274b3f1f1 Issue #26657: Fix Windows directory traversal vulnerability with http.server
Based on patch by Philipp Hagemeister.  This fixes a regression caused by
revision f4377699fd47.
2016-04-18 03:45:18 +00:00
Martin Panter 0cab9c1eba Issue #26404: Add context manager to socketserver, by Aviv Palivoda 2016-04-13 00:36:52 +00:00
Martin Panter da3bb38452 Issue #26585: Eliminate _quote_html() and use html.escape(quote=False)
Patch by Xiang Zhang.
2016-04-11 00:40:08 +00:00
Martin Panter 50badad807 Issue #26586: Simple enhancements to BaseHTTPRequestHandler by Xiang Zhang 2016-04-03 01:28:53 +00:00
Martin Panter b93e4b2480 Issue #26586: Merge excessive HTTP header handling from 3.5 2016-04-03 01:28:49 +00:00
Martin Panter acc03195b0 Issue #26586: Handle excessive header fields in http.server, by Xiang Zhang 2016-04-03 00:45:46 +00:00
Berker Peksag 04bc5b9e48 Issue #747320: Use email.utils.formatdate() to avoid code duplication
in BaseHTTPRequestHandler

Initial patch by karlcow.
2016-03-14 06:06:03 +02:00
Martin Panter 3f930dcd87 Merge typo fixes from 3.4 into 3.5 2015-10-07 11:01:47 +00:00
Martin Panter 9955a373a8 Various minor typos in documentation and comments 2015-10-07 10:26:23 +00:00
Martin Panter 56b76d25dd Issues #25232, #24657: Merge two CGI server fixes from 3.4 into 3.5 2015-10-03 06:03:25 +00:00
Martin Panter cb29e8c0e5 Issue #24657: Prevent CGIRequestHandler from collapsing the URL query
Initial patch from Xiang Zhang. Also fix out-of-date _url_collapse_path() doc
string.
2015-10-03 05:55:46 +00:00
Martin Panter a02e18a43f Issue #25232: Fix CGIRequestHandler's splitting of URL query
Patch from Xiang Zhang.
2015-10-03 05:38:07 +00:00
Robert Collins 5409177b62 Issue #24774: Fix docstring in http.server.test.
Patch from Chiu-Hsiang Hsu.
2015-08-17 12:19:19 +12:00
Robert Collins 9644f2450d Issue #24774: Fix docstring in http.server.test.
Patch from Chiu-Hsiang Hsu.
2015-08-17 12:18:35 +12:00
Serhiy Storchaka c0a23e6320 Issue #21793: BaseHTTPRequestHandler again logs response code as numeric,
not as stringified enum.  Patch by Demian Brecht.
2015-03-07 11:51:37 +02:00
Benjamin Peterson 1130c7f693 merge 3.4 (#23410) 2015-02-17 21:13:30 -05:00
Benjamin Peterson 70e2847347 document the requestline and close_connection attributes, use real booleans, and add tests (closes #23410)
Patch by Martin Panter.
2015-02-17 21:11:10 -05:00
Berker Peksag 6767757589 Issue #23418: Add missing entries to http.server.__all__.
Patch by Martin Panter.
2015-02-13 20:48:41 +02:00
Berker Peksag 366c570d1f Issue #23418: Add missing entries to http.server.__all__.
Patch by Martin Panter.
2015-02-13 20:48:15 +02:00
Benjamin Peterson fe975a234f merge 3.4 (#23112) 2014-12-26 10:56:51 -06:00
Benjamin Peterson 94cb7a2429 fix behavior of trailing slash redirection when a query string is involved (closes #23112) 2014-12-26 10:53:43 -06:00
Serhiy Storchaka e4db76967d Issue #21793: Added http.HTTPStatus enums (i.e. HTTPStatus.OK,
HTTPStatus.NOT_FOUND).  Patch by Demian Brecht.
2014-12-23 16:28:28 +02:00
Serhiy Storchaka cb5bc408ad Issue #22165: SimpleHTTPRequestHandler now supports undecodable file names. 2014-08-17 08:22:11 +03:00
Ned Deily 5d0d2e6ed6 Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:16:56 -07:00
Ned Deily 217f4cd7ee Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:12:39 -07:00
Ned Deily 915a30fb0d Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435.  Patch by Zach Byrne.
2014-07-12 22:06:26 -07:00
Benjamin Peterson a8c75fe31a merge 3.3 (#21766) 2014-06-14 18:41:13 -07:00
Benjamin Peterson 6cd1954c5c merge 3.2 (#21766) 2014-06-14 18:40:10 -07:00
Benjamin Peterson 73b8b1cdb8 url unquote the path before checking if it refers to a CGI script (closes #21766) 2014-06-14 18:36:29 -07:00
Victor Stinner 7fa767e517 Issue #20976: pyflakes: Remove unused imports 2014-03-20 09:16:38 +01:00
Serhiy Storchaka c0b0bb6e01 Issue #20331: Fixed possible FD leaks in various modules:
http.server, imghdr, mailcap, mimetypes, xml.etree.
2014-01-25 19:43:56 +02:00
Serhiy Storchaka 91b0bc237c Issue #20331: Fixed possible FD leaks in various modules:
http.server, imghdr, mailcap, mimetypes, xml.etree.
2014-01-25 19:43:02 +02:00
Benjamin Peterson c28ab08887 merge 3.3 (#18574) 2014-01-18 21:51:11 -05:00
Benjamin Peterson 044242360d fix handling of 100-continue status code (closes #18574) 2014-01-18 21:50:18 -05:00
Benjamin Peterson c99874da83 merge 3.3 (#19435) 2013-10-30 12:51:16 -04:00
Benjamin Peterson a50f89954d merge 3.2 (#19435) 2013-10-30 12:50:18 -04:00
Benjamin Peterson 35aca89617 merge 3.1 (#19435) 2013-10-30 12:48:59 -04:00
Benjamin Peterson 04e9de40f3 use the collapsed path in the run_cgi method (closes #19435) 2013-10-30 12:43:09 -04:00
Senthil Kumaran b0ce820bb3 merge from 3.3 2013-09-29 18:59:27 -07:00
Senthil Kumaran 600b735062 Minor code improvement. Review comment by Eric V. Smith 2013-09-29 18:59:04 -07:00
Senthil Kumaran defe7f4c62 Expose --bind argument for http.server, enable http.server to bind to a user
specified network interface.

Patch contributed by Malte Swart. Addresses issue #17764.

HG :Enter commit message.  Lines beginning with 'HG:' are removed.
2013-09-15 09:37:27 -07:00
Senthil Kumaran 187b063005 Fix http.server's request handling case on trailing '/'.
Patch contributed by Vajrasky Kok. Addresses Issue #17324
2013-09-13 00:22:45 -07:00
Senthil Kumaran 72c238e21a Fix http.server's request handling case on trailing '/'.
Patch contributed by Vajrasky Kok. Addresses Issue #17324
2013-09-13 00:21:18 -07:00
Brett Cannon cd171c8e92 Issue #18200: Back out usage of ModuleNotFoundError (8d28d44f3a9a) 2013-07-04 17:43:24 -04:00
Brett Cannon 0a140668fa Issue #18200: Update the stdlib (except tests) to use
ModuleNotFoundError.
2013-06-13 20:57:26 -04:00
Senthil Kumaran 2688644eef #1291 http.server's send_error takes an optional explain argument 2013-03-15 07:53:21 -07:00
Senthil Kumaran df1d3c5c4b Reverting the changeset b87792757ee8 made for Issue #12921 2013-03-05 02:28:18 -08:00
Senthil Kumaran 884f0585a4 Reverting the changeset 5d76a4746d9d made for Issue #12921 2013-03-05 02:26:50 -08:00
Senthil Kumaran 1e7551dc87 Reverting the changeset 5126e62c60af made for Issue #12921 2013-03-05 02:25:58 -08:00
Senthil Kumaran 24431f1802 Fix Issue #12921: BaseHTTPServer's send_error should send the correct error
response message when  send_error includes a message in addition to error
status. Patch contributed by Karl.
2013-03-05 01:26:33 -08:00
Senthil Kumaran c37f835a43 Fix Issue #12921: BaseHTTPServer's send_error should send the correct error
response message when  send_error includes a message in addition to error
status. Patch contributed by Karl.
2013-03-05 01:23:44 -08:00
Senthil Kumaran 3fb066d286 Fix Issue #12921: BaseHTTPServer's send_error should send the correct error
response message when  send_error includes a message in addition to error
status. Patch contributed by Karl.
2013-03-05 01:22:57 -08:00
Andrew Svetlov f7a17b48d7 Replace IOError with OSError (#16715) 2012-12-25 16:47:37 +02:00
Andrew Svetlov ad28c7f9da Issue #16706: get rid of os.error 2012-12-18 22:02:39 +02:00
Senthil Kumaran 52d2720499 Issue #16088: BaseHTTPRequestHandler's send_error method includes a
Content-Length header.  Patch by Antoine Pitrou.
2012-10-10 23:16:21 -07:00
Senthil Kumaran 1251fafcc5 Issue 14989: http.server --cgi option can enable the CGI http server. 2012-06-03 16:15:54 +08:00
Hynek Schlawack 51b2ed51f0 #14809: Add HTTP status codes from RFC 6585 to http.server and http.client
Patch by EungJun Yi.
2012-05-16 09:51:07 +02:00
Senthil Kumaran 4ca008b643 issue6085 - update docs in default branch 2012-04-29 13:44:14 +08:00
Senthil Kumaran db727b4a77 Fix issue6085 - Remove the delay caused by fqdn lookup while logging in BaseHTTPRequestHandler 2012-04-29 13:41:03 +08:00
Senthil Kumaran 1aacba497b Fix Issue6085 - SimpleHTTPServer address_string to return client ip instead of client hostname 2012-04-29 12:51:54 +08:00
Senthil Kumaran 690598aba2 merge to default - Issue 10484 - Incorporate improvements to CGI module - Suggested by Glenn Linderman. Refactor code and tests 2012-04-12 02:37:11 +08:00
Senthil Kumaran d70846b1b1 3.2 - Issue 10484 - Incorporate improvements to CGI module - Suggested by Glenn Linderman. Refactor code and tests 2012-04-12 02:34:32 +08:00
Senthil Kumaran d05853da97 merge - fix the incorrect changes made for PATH_INFO value - Issue10484 2012-04-11 03:16:16 +08:00
Senthil Kumaran dbb369d0ef 3.2- fix the incorrect changes made for PATH_INFO value - Issue10484 2012-04-11 03:15:28 +08:00
Senthil Kumaran 209d70e579 closes issue10484 - Fix the http.server's cgi PATH_INFO handling problem 2012-03-16 01:14:51 -07:00
Senthil Kumaran be3f851411 closes issue10484 - Fix the http.server's cgi PATH_INFO handling problem 2012-03-16 01:13:50 -07:00
Senthil Kumaran 3075549d53 Minor code style improvements in http.server suggested in Issue13294. 2011-12-23 17:03:41 +08:00
Senthil Kumaran d22983d081 merge from 3.2. Minor code style improvements in http.server suggested in Issue13294. 2011-12-23 17:04:23 +08:00
Ezio Melotti ca897e960a #13295: http.server now produces valid HTML 4.01 strict. 2011-11-02 19:33:29 +02:00
Victor Stinner fb25ba9b07 Close #12289: Fix "is executable?" test in the CGI server
Use os.access(path, os.X_OK) instead of (os.stat(path).st_mode & 0o111 != 0),
and ignore the test on Windows.
2011-06-20 17:45:54 +02:00
Senthil Kumaran c7ae19b6a7 Issue #3709: a flush_headers method to BaseHTTPRequestHandler which manages the
sending of headers to output stream and flushing the internal headers buffer.
Patch contribution by Andrew Schaaf
2011-05-09 23:25:02 +08:00
Senthil Kumaran bec7886e3f Merge from 3.1 2011-03-20 10:45:10 +08:00
Senthil Kumaran 1b407fe658 Issue #11567 - Let's have the DOCTYPE as HTML instead of XHTML. 2011-03-20 10:44:30 +08:00
Senthil Kumaran 9f9193ec37 Error message in http.server code. Missed to update in 3.1 branch initially. 2011-03-17 17:01:45 +08:00
Senthil Kumaran b253c9f66d Fix issue11567: http.server DEFAULT_ERROR_MESSAGE format. Patch by Gennadiy Zlobin. 2011-03-17 16:43:22 +08:00
Senthil Kumaran dab6780c9e merge from 3.2 2011-03-20 10:45:41 +08:00
Senthil Kumaran 1da1906871 Merge from 3.2 2011-03-17 16:48:26 +08:00
Marc-André Lemburg 8f36af7a4c Normalize the encoding names for Latin-1 and UTF-8 to
'latin-1' and 'utf-8'.

These are optimized in the Python Unicode implementation
to result in more direct processing, bypassing the codec
registry.

Also see issue11303.
2011-02-25 15:42:01 +00:00
Armin Ronacher 8d96d77f9a Issue #10980: encode headers with latin1 instead of ASCII in the HTTP server.
This makes the implementation of PEP 3333 compliant servers on top of
BaseHTTPServer possible.
2011-01-22 13:13:05 +00:00
Antoine Pitrou ff1bbba92a Merged revisions 87373,87381 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

........
  r87373 | senthil.kumaran | 2010-12-18 17:55:23 +0100 (sam., 18 déc. 2010) | 3 lines

  Fix Issue6791 - Limit the HTTP header readline with _MAXLENGTH. Patch by Antoine Pitrou
........
  r87381 | antoine.pitrou | 2010-12-18 18:59:18 +0100 (sam., 18 déc. 2010) | 3 lines

  NEWS entry for r87373
........
2010-12-18 18:04:38 +00:00
Senthil Kumaran 5466bf1c94 Fix Issue6791 - Limit the HTTP header readline with _MAXLENGTH. Patch by Antoine Pitrou 2010-12-18 16:55:23 +00:00
Antoine Pitrou 3022ce1a14 Merged revisions 87317 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

........
  r87317 | antoine.pitrou | 2010-12-16 17:48:36 +0100 (jeu., 16 déc. 2010) | 4 lines

  Issue #10714: Limit length of incoming request in http.server to 65536 bytes
  for security reasons.  Initial patch by Ross Lagerwall.
........

(also backport some tests)
2010-12-16 17:03:16 +00:00
Antoine Pitrou c492437922 Issue #10714: Limit length of incoming request in http.server to 65536 bytes
for security reasons.  Initial patch by Ross Lagerwall.
2010-12-16 16:48:36 +00:00
Georg Brandl cbd2ab1311 #1513299: cleanup some map() uses where a comprehension works better. 2010-12-04 10:39:14 +00:00
Senthil Kumaran e4dad4f8e2 Fix issue3709 - BaseHTTPRequestHandler will buffer the headers and write only on end_headers call. 2010-11-21 14:36:14 +00:00
Brian Curtin 938ece7152 Merged revisions 86195 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

........
  r86195 | brian.curtin | 2010-11-05 10:04:48 -0500 (Fri, 05 Nov 2010) | 3 lines

  Close subprocess pipes in the non-UNIX section of run_cgi.
  Clears a number of ResourceWarnings in test_httpservers.
........
2010-11-05 15:08:19 +00:00
Brian Curtin cbad4df179 Close subprocess pipes in the non-UNIX section of run_cgi.
Clears a number of ResourceWarnings in test_httpservers.
2010-11-05 15:04:48 +00:00
Georg Brandl 1f7fffb308 #2830: add html.escape() helper and move cgi.escape() uses in the standard library to it. It defaults to quote=True and also escapes single quotes, which makes casual use safer. The cgi.escape() interface is not touched, but emits a (silent) PendingDeprecationWarning. 2010-10-15 15:57:45 +00:00
Senthil Kumaran 5e8826cd98 Merged revisions 85202 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

........
  r85202 | senthil.kumaran | 2010-10-03 23:25:45 +0530 (Sun, 03 Oct 2010) | 4 lines

  Fix Issue9272 - Change CGIHTTPServer to give the child program a copy of os.environ
........
2010-10-03 18:04:52 +00:00
Senthil Kumaran 4271372a71 Fix Issue9272 - Change CGIHTTPServer to give the child program a copy of os.environ 2010-10-03 17:55:45 +00:00
Senthil Kumaran 0f476d49f8 Issue1491 - BaseHTTPServer incorrectly implements response code 100 2010-09-30 06:09:18 +00:00
Georg Brandl caa78fee03 Merged revisions 83371,83390 via svnmerge from
svn+ssh://svn.python.org/python/branches/py3k

........
  r83371 | georg.brandl | 2010-07-31 23:54:24 +0200 (Sa, 31 Jul 2010) | 1 line

  #8292: Fix three instances of truth tests on return values of filter() (which is always true in Python 3).
........
  r83390 | georg.brandl | 2010-08-01 10:07:49 +0200 (So, 01 Aug 2010) | 1 line

  #8230: make Lib/test/sortperf.py run on Python 3.
........
2010-08-01 19:07:28 +00:00
Georg Brandl 62e2ca2193 #8292: Fix three instances of truth tests on return values of filter() (which is always true in Python 3). 2010-07-31 21:54:24 +00:00
Senthil Kumaran 613c61c741 Merged revisions 78301 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

................
  r78301 | senthil.kumaran | 2010-02-22 16:30:50 +0530 (Mon, 22 Feb 2010) | 10 lines

  Merged revisions 78299 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/trunk

  ........
    r78299 | senthil.kumaran | 2010-02-22 16:25:08 +0530 (Mon, 22 Feb 2010) | 4 lines

    Fix Issue7172 - BaseHTTPServer.BaseHTTPRequestHandler.responses[405] - changing
    server to resource in the 405 response msg.
  ........
................
2010-02-22 11:02:53 +00:00
Senthil Kumaran 7aa2621720 Merged revisions 78299 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk

........
  r78299 | senthil.kumaran | 2010-02-22 16:25:08 +0530 (Mon, 22 Feb 2010) | 4 lines

  Fix Issue7172 - BaseHTTPServer.BaseHTTPRequestHandler.responses[405] - changing
  server to resource in the 405 response msg.
........
2010-02-22 11:00:50 +00:00
Senthil Kumaran ca5130cba3 Merged revisions 76210 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/py3k

................
  r76210 | senthil.kumaran | 2009-11-11 09:47:53 +0530 (Wed, 11 Nov 2009) | 10 lines

  Merged revisions 76208 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/trunk

  ........
    r76208 | senthil.kumaran | 2009-11-11 07:04:44 +0530 (Wed, 11 Nov 2009) | 3 lines

    CGIHTTPRequestHandler.run_cgi() to use subprocess for Non Unix platforms. Fix
    based on Issue1235.
  ........
................
2009-11-11 04:21:22 +00:00
Senthil Kumaran e29cd162ed Merged revisions 76208 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk

........
  r76208 | senthil.kumaran | 2009-11-11 07:04:44 +0530 (Wed, 11 Nov 2009) | 3 lines

  CGIHTTPRequestHandler.run_cgi() to use subprocess for Non Unix platforms. Fix
  based on Issue1235.
........
2009-11-11 04:17:53 +00:00
Kristján Valur Jónsson 985fc6a304 http://bugs.python.org/issue6267
porting revision 73638 to py3k
2009-07-01 10:01:31 +00:00
Georg Brandl 706824f19f More codestring -> codebytes. 2009-06-04 09:42:55 +00:00
Benjamin Peterson a7deeeeed7 port r72246 2009-05-08 20:54:42 +00:00