mirror of
https://github.com/python/cpython.git
synced 2025-11-20 19:06:50 +00:00
Fix an open redirection vulnerability in the `http.server` module when an URI path starts with `//` that could produce a 301 Location header with a misleading target. Vulnerability discovered, and logic fix proposed, by Hamza Avvan (@hamzaavvan). Test and comments authored by Gregory P. Smith [Google]. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| client.py | ||
| cookiejar.py | ||
| cookies.py | ||
| server.py | ||