Skip to content

Commit ebc7064

Browse files
committed
[3.11] pythongh-104711: Add security warning to the CGIHTTPRequestHandler document (pythonGH-115915)
(cherry picked from commit dac8ff4) Co-authored-by: AN Long <[email protected]>
1 parent 862775b commit ebc7064

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Doc/library/http.server.rst

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -502,6 +502,12 @@ the ``--cgi`` option::
502502

503503
python -m http.server --cgi
504504

505+
.. warning::
506+
507+
:class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option
508+
are not intended for use by untrusted clients and may be vulnerable
509+
to exploitation. Always use within a secure environment.
510+
505511
.. _http.server-security:
506512

507513
Security Considerations

0 commit comments

Comments
 (0)