mirror of https://github.com/python/cpython.git
![]() Fix an open redirection vulnerability in the `http.server` module when
an URI path starts with `//` that could produce a 301 Location header
with a misleading target. Vulnerability discovered, and logic fix
proposed, by Hamza Avvan (@hamzaavvan).
Test and comments authored by Gregory P. Smith [Google].
(cherry picked from commit
|
||
---|---|---|
.. | ||
__init__.py | ||
client.py | ||
cookiejar.py | ||
cookies.py | ||
server.py |