[issue44022] urllib http client possible infinite loop on a 100 Continue response

Christian Heimes report at bugs.python.org
Thu May 6 04:37:25 EDT 2021


Christian Heimes <lists at cheimes.de> added the comment:

http.server is out of scope for CVEs. The module is not designed for security-sensitive usage and explicitly documented as insecure and not suitable for production use:

https://docs.python.org/3/library/http.server.html#module-http.server

> Warning: http.server is not recommended for production. It only implements basic security checks.

----------
nosy: +christian.heimes

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue44022>
_______________________________________


More information about the Python-bugs-list mailing list