gh-104711: Add security warning to the CGIHTTPRequestHandler document (GH-115915)

This commit is contained in:
AN Long 2024-03-02 01:25:14 +08:00 committed by GitHub
parent 05b04903a1
commit dac8ff4c40
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 0 deletions

View File

@ -520,6 +520,12 @@ the ``--cgi`` option::
:mod:`http.server` command line ``--cgi`` support is being removed
because :class:`CGIHTTPRequestHandler` is being removed.
.. warning::
:class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option
are not intended for use by untrusted clients and may be vulnerable
to exploitation. Always use within a secure environment.
.. _http.server-security:
Security Considerations