[issue21766] CGIHTTPServer File Disclosure

[Roundup Robot]

Roundup Robot added the comment:

New changeset b4bab0788768 by Benjamin Peterson in branch '2.7':
url unquote the path before checking if it refers to a CGI script (closes #21766)
http://hg.python.org/cpython/rev/b4bab0788768

New changeset e47422855841 by Benjamin Peterson in branch '3.2':
url unquote the path before checking if it refers to a CGI script (closes #21766)
http://hg.python.org/cpython/rev/e47422855841

New changeset 5676797f3a3e by Benjamin Peterson in branch '3.3':
merge 3.2 (#21766)
http://hg.python.org/cpython/rev/5676797f3a3e

New changeset 847e288d6e93 by Benjamin Peterson in branch '3.4':
merge 3.3 (#21766)
http://hg.python.org/cpython/rev/847e288d6e93

New changeset f8b3bb5eb190 by Benjamin Peterson in branch 'default':
merge 3.4 (#21766)
http://hg.python.org/cpython/rev/f8b3bb5eb190

----------
nosy: +python-dev
resolution:  -> fixed
stage:  -> resolved
status: open -> closed

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue21766>
_______________________________________