[Python-checkins] python/dist/src/Doc/lib libcgi.tex, 1.40.10.1, 1.40.10.2

aleax at users.sourceforge.net aleax at users.sourceforge.net
Sun Nov 2 11:31:25 EST 2003


Update of /cvsroot/python/python/dist/src/Doc/lib
In directory sc8-pr-cvs1:/tmp/cvs-serv1322

Modified Files:
      Tag: release23-maint
	libcgi.tex 
Log Message:
Avoid giving advice that's bad for security, as per SF bug #823515



Index: libcgi.tex
===================================================================
RCS file: /cvsroot/python/python/dist/src/Doc/lib/libcgi.tex,v
retrieving revision 1.40.10.1
retrieving revision 1.40.10.2
diff -C2 -d -r1.40.10.1 -r1.40.10.2
*** libcgi.tex	11 Aug 2003 23:43:04 -0000	1.40.10.1
--- libcgi.tex	2 Nov 2003 16:31:22 -0000	1.40.10.2
***************
*** 599,603 ****
  
  \item When reading or writing external files, make sure they can be read
! or written by every user on the system.
  
  \item Don't try to give a CGI script a set-uid mode.  This doesn't work on
--- 599,605 ----
  
  \item When reading or writing external files, make sure they can be read
! or written by the userid under which your CGI script will be running:
! this is typically the userid under which the web server is running, or some
! explicitly specified userid for a web server's \samp{suexec} feature.
  
  \item Don't try to give a CGI script a set-uid mode.  This doesn't work on





More information about the Python-checkins mailing list