[Python-checkins] cpython (3.2): Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all

georg.brandl python-checkins at python.org
Tue Sep 30 15:49:13 CEST 2014


https://hg.python.org/cpython/rev/02dae04b3e2b
changeset:   92668:02dae04b3e2b
branch:      3.2
user:        Georg Brandl <georg at python.org>
date:        Wed Sep 17 13:17:58 2014 +0800
summary:
  Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces.

files:
  Lib/pydoc.py           |  4 ++--
  Lib/test/test_pydoc.py |  2 ++
  Misc/NEWS              |  3 +++
  3 files changed, 7 insertions(+), 2 deletions(-)


diff --git a/Lib/pydoc.py b/Lib/pydoc.py
--- a/Lib/pydoc.py
+++ b/Lib/pydoc.py
@@ -2431,8 +2431,8 @@
     class DocServer(http.server.HTTPServer):
 
         def __init__(self, port, callback):
-            self.host = (sys.platform == 'mac') and '127.0.0.1' or 'localhost'
-            self.address = ('', port)
+            self.host = 'localhost'
+            self.address = (self.host, port)
             self.callback = callback
             self.base.__init__(self, self.address, self.handler)
             self.quit = False
diff --git a/Lib/test/test_pydoc.py b/Lib/test/test_pydoc.py
--- a/Lib/test/test_pydoc.py
+++ b/Lib/test/test_pydoc.py
@@ -510,6 +510,8 @@
             return text
 
         serverthread = pydoc._start_server(my_url_handler, port=0)
+        self.assertIn('localhost', serverthread.docserver.address)
+
         starttime = time.time()
         timeout = 1  #seconds
 
diff --git a/Misc/NEWS b/Misc/NEWS
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -10,6 +10,9 @@
 Library
 -------
 
+- Issue #22421: Fix a regression that caused the pydoc server to be bound to
+  all interfaces instead of only localhost.
+
 - Issue #22419: Limit the length of incoming HTTP request in wsgiref server to
   65536 bytes and send a 414 error code for higher lengths. Patch contributed
   by Devin Cook.

-- 
Repository URL: https://hg.python.org/cpython


More information about the Python-checkins mailing list