Re: [Twisted-Python] Re: [Twisted-commits] log stderr and non-zero exit code in CGIs, don't show info to users as it is a security risk (closes issue #241)

On Thu, 28 Aug 2003 19:16:09 -0500 Glyph Lefkowitz <glyph@twistedmatrix.com> wrote:

Also, could you clarify the security risk of displaying stderr from CGI scripts? I've never heard of a CGI that puts security-critical information on stderr rather than stdout and makes it a risk to display to users.

If it's a python script it's probably going to be a traceback. Also, I don't care about the Perl FAQ :) If you can't figure out how to read the exact same info out of a logfile, you shouldn't be trying to debug a CGI script. -- Itamar Shtull-Trauring http://itamarst.org/ Available for Python & Twisted consulting