[issue26657] Directory traversal with http.server and SimpleHTTPServer on windows

Thomas report at bugs.python.org
Sat Apr 2 06:07:46 EDT 2016


Thomas added the comment:

Looks ok to me security-wise. But I just noticed that it the trailing slash is inconsistent on Windows, e.g.:

translate_path('asdf/')
==
'C:\\Users\\User\\Desktop\\temp\\asdf/' <- this slash

because path += '/' is used instead of os.path.sep. But apparently nobody complained about this yet, so it probably is not an issue.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue26657>
_______________________________________


More information about the Python-bugs-list mailing list