mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-11-25 12:44:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

Fix issue11442 - Add a charset parameter to the Content-type to avoid XSS attacks.

Browse source 
Patch by Tom N. (Backported from py3k codeline).
This commit is contained in:
Senthil Kumaran 2011-03-17 12:34:18 +08:00
parent 6e0a8b8ab6
commit 3853586e0c
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Lib/SimpleHTTPServer.py
View file

@ -16,6 +16,7 @@ import BaseHTTPServer
import urllib
import urlparse
import cgi
import sys
import shutil
import mimetypes
try:
@ -132,7 +133,8 @@ class SimpleHTTPRequestHandler(BaseHTTPServer.BaseHTTPRequestHandler):
length = f.tell()
f.seek(0)
self.send_response(200)
self.send_header("Content-type", "text/html")
encoding = sys.getfilesystemencoding()
self.send_header("Content-type", "text/html; charset=%s" % encoding)
self.send_header("Content-Length", str(length))
self.end_headers()
return f