[issue11197] information leakage with SimpleHTTPServer

engelbert gruber report at bugs.python.org
Sat Jun 25 15:06:54 CEST 2011


engelbert gruber <grubert at users.sourceforge.net> added the comment:

My test setup:

  test.html
  2.5/test.html
  2.7/test.html

in 2.5 and 2.7 execute ::

  python.exe -m SimpleHTTPServer 8000

``http://localhost:8000/../`` shows the contents of the ``2.x`` directory.

``http://localhost:8000/../test.html`` shows the contents of the file in the ``2.x`` directory not the one in the upper.

Should be closed.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue11197>
_______________________________________


More information about the Python-bugs-list mailing list