Skip to content

Commit eb0603b

Browse files
authored
gh-104711: Add security warning to the CGIHTTPRequestHandler document (GH-115915)
(cherry picked from commit dac8ff4)
1 parent d8a56ea commit eb0603b

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Doc/library/http.server.rst

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -507,6 +507,12 @@ the ``--cgi`` option::
507507

508508
python -m http.server --cgi
509509

510+
.. warning::
511+
512+
:class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option
513+
are not intended for use by untrusted clients and may be vulnerable
514+
to exploitation. Always use within a secure environment.
515+
510516
.. _http.server-security:
511517

512518
Security Considerations

0 commit comments

Comments
 (0)