[New-bugs-announce] [issue11442] list_directory() in SimpleHTTPServer.py should add charset=... to Content-type header

[Guido van Rossum]

New submission from Guido van Rossum <guido at python.org>:

The security list received a report about SimpleHTTPServer's list_directory(). It needs to add a charset parameter to the Content-type header. This is already done in Python 3 (where this code lives in http/server.py) but not in any Python 2 versions I can find. A simple backport of the code in Python 3 should hopefully suffice.

I'm marking this tentatively as a release blocker, but I don't see it's necessary to issue an urgent release. It should just be fixed before the next scheduled releases of 2.5, 2.6, 2.7.

----------
messages: 130347
nosy: barry, benjamin.peterson, gvanrossum
priority: release blocker
severity: normal
stage: needs patch
status: open
title: list_directory() in SimpleHTTPServer.py should add charset=... to Content-type header
type: security
versions: Python 2.5, Python 2.6, Python 2.7

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue11442>
_______________________________________