[issue26657] Directory traversal with http.server and SimpleHTTPServer on windows
Thomas
report at bugs.python.org
Sat Apr 2 06:07:46 EDT 2016
Thomas added the comment:
Looks ok to me security-wise. But I just noticed that it the trailing slash is inconsistent on Windows, e.g.:
translate_path('asdf/')
==
'C:\\Users\\User\\Desktop\\temp\\asdf/' <- this slash
because path += '/' is used instead of os.path.sep. But apparently nobody complained about this yet, so it probably is not an issue.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue26657>
_______________________________________
More information about the Python-bugs-list
mailing list