0cf2cf2b7d
Issue #26657 : Fix SimpleHTTPServer Windows directory traversal vulnerability
...
Based on patch by Philipp Hagemeister. This fixes a regression caused by
revision 6b314f5c9404.
2016-04-18 03:45:18 +00:00
a71cfc5cf3
fix behavior of trailing slash redirection when a query string is involved ( closes #23112 )
2014-12-26 10:53:43 -06:00
1adbacfd1c
Issue #20331 : Fixed possible FD leaks in various modules:
...
SimpleHTTPServer, imghdr, mailcap, mimetypes, xml.etree.
2014-01-25 19:42:27 +02:00
a719eed4d9
Code improvement. Review comment by Eric V. Smith
2013-09-29 18:57:42 -07:00
d4fac04fde
Fix SimpleHTTPServer's request handling case on trailing '/'.
...
Patch contributed by Vajrasky Kok. Addresses Issue #17324
2013-09-13 00:18:55 -07:00
dfd1579e54
merge from 2.5 branch.
2011-03-17 14:23:24 +08:00
3853586e0c
Fix issue11442 - Add a charset parameter to the Content-type to avoid XSS attacks.
...
Patch by Tom N. (Backported from py3k codeline).
2011-03-17 12:34:18 +08:00
0f7cddc308
Issue839496: SimpleHTTPServer should open all files in binary mode.
...
Forward-port of 38255 (2005/01/15!)
This was already fixed in 2.4, but never merged into trunk...
py3k is already right, thanks to the bytes/str distinction!
Should be backported to 2.5.
2008-07-06 21:34:39 +00:00
a6298528e1
#2169 : make generated HTML more valid
2008-02-28 14:03:03 +00:00
c5f05e45cf
Patch #2167 from calvin: Remove unused imports
2008-02-23 17:40:11 +00:00
d14600ec94
Issue 1224. Now we support again the double slash in the URL.
...
Thanks Anthony Lenton.
2008-02-18 12:48:43 +00:00
60775f29de
[Patch #827559 from Chris Gonnerman] Make SimpleHTTPServer redirect when a directory URL is missing the trailing slash; this lets relative links work.
2006-12-22 19:08:41 +00:00
4281902545
[Patch #827559 from Chris Gonnerman] Make SimpleHTTPServer redirect when a directory URL is missing the trailing slash; this lets relative links work.
2006-12-22 19:06:16 +00:00
5d538b603f
Whitespace normalization.
2006-06-14 22:38:13 +00:00
83cc0d0add
Bug #1117556 : SimpleHTTPServer now tries to find and use the system's
...
mime.types file for determining MIME types.
2006-06-14 08:50:03 +00:00
5d076961e2
Patch #1417555 : SimpleHTTPServer now returns Last-Modified headers.
2006-02-17 13:34:16 +00:00
45ab233935
Bug #1394565 : SimpleHTTPServer now doesn't choke on query paramters
...
any more.
2006-01-13 17:05:56 +00:00
6ee6952eb2
Patch #1360443 : Make SimpleHTTPServer display unencoded directory names.
2005-12-16 19:36:08 +00:00
a617271dbd
Use cStringIO where available.
2004-12-31 19:15:26 +00:00
6d63a8dd09
Patch #1011123 : Use urllib.quote() instead of cgi.escape() for encoding the
...
href attribute in list_directory(). This fixes the links for legal Unix
filenames such as 'a"b'.
2004-08-21 10:43:29 +00:00
b839c1f33f
[Bug #866222 ] Update docstrings.
2004-08-07 19:02:19 +00:00
6b59f5f3fd
Let library modules use the new keyword arguments for list.sort().
2003-10-16 05:53:16 +00:00
54f0222547
SF 563203. Replaced 'has_key()' with 'in'.
2002-06-01 14:18:47 +00:00
587c98c863
Patch #430706 : Persistent connections in BaseHTTPServer.
2002-03-17 18:37:22 +00:00
304b6a3225
Correction after translation test.
2001-02-09 10:26:06 +00:00
bf97c9d87b
String method conversion.
2001-02-09 10:18:37 +00:00
5b48c45736
unnecessary semicolon
2001-01-26 17:08:32 +00:00
e99d5ea25b
added __all__ lists to a number of Python modules
...
added test script and expected output file as well
this closes patch 103297.
__all__ attributes will be added to other modules without first submitting
a patch, just adding the necessary line to the test script to verify
more-or-less correct implementation.
2001-01-20 19:54:20 +00:00
077153e973
- Use mimetypes.types_map to initialize extensions_map.
...
- Change the default file type to application/octet-stream.
- Add support to recognize .py, .c, .h files as text/plain (this is
what I use most :-).
2001-01-14 23:21:25 +00:00
1d105d15d3
For this server to work on Windows, directories should use "/" as the
...
separator in the href, not os.sep.
Added a <title> tag to directory listings.
Bumped version to 0.5.
2000-09-04 15:55:31 +00:00
37c03ff3a9
Using shutil's function to copy data between file objects instead
...
of rolling our own.
Note:
This is my first sourceforge checkin. If you see anything funny about
this patch, please let me know.
2000-07-29 05:15:56 +00:00
1d10f3eac2
Changed list_directory() somewhat. It is now only called when there
...
is no index.htm[l] file, and when it is called, it also spits out the
headers. When an index.htm[l] file is present, the regular (file
access) path is followed. Also, when the guessed content-type matches
text/*, open the file in text mode; otherwise in binary mode.
2000-05-21 16:25:29 +00:00
57af072e5c
Add a simple directory listing function.
2000-05-09 14:57:09 +00:00
d7b147b040
Moshe Zadka writes: When deploying SimpleHTTPServer, I noticed a
...
problem: it does not encode/decode the urls, which is wrong.
1999-11-16 19:04:32 +00:00
f8fd11d039
No need to import sys, time, socket or SocketServer. (Andrew Dalke & kjpylint)
1999-05-03 18:01:31 +00:00
5c3b384a85
Patch by Jeff Rush:
...
In SimpleHTTPServer.py, the server specified in test() should
be BaseHTTPServer.HTTPServer, in case the request handler should
want to reference the two attributes added by
BaseHTTPServer.server_bind:
self.server_name = hostname
self.server_port = port
There was some Bobo CGI code that wanted access to those attributes.
1998-12-07 04:08:30 +00:00
391c8b4ea2
Open the file in binary mode -- so serving images from a Windows box
...
might actually work.
1998-12-07 03:53:18 +00:00
45e2fbc2e7
Mass check-in after untabifying all files that need it.
1998-03-26 21:13:24 +00:00
f469d5b05d
Get rid of nobody_uid() and import pwd -- not used here.
1996-09-04 23:42:04 +00:00
3b7b8131a6
recognize a few more file types
1995-09-18 21:50:43 +00:00
e7e578ffe0
Initial revision
1995-08-04 04:00:20 +00:00
Martin Panter
Benjamin Peterson
Serhiy Storchaka
Senthil Kumaran
Senthil Kumaran
Amaury Forgeot d'Arc
Andrew M. Kuchling
Christian Heimes
Facundo Batista
Tim Peters
Georg Brandl
Raymond Hettinger
Johannes Gijsbers
Martin v. Löwis
Eric S. Raymond
Jeremy Hylton
Skip Montanaro
Guido van Rossum
Moshe Zadka