mirror of
https://github.com/python/cpython.git
synced 2025-12-08 06:10:17 +00:00
Fix an open redirection vulnerability in the `http.server` module when
an URI path starts with `//` that could produce a 301 Location header
with a misleading target. Vulnerability discovered, and logic fix
proposed, by Hamza Avvan (@hamzaavvan).
Test and comments authored by Gregory P. Smith [Google].
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| __init__.py | ||
| client.py | ||
| cookiejar.py | ||
| cookies.py | ||
| server.py | ||