Miss Islington (bot) 5715382d3a gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) ...

Fix an open redirection vulnerability in the `http.server` module when
an URI path starts with `//` that could produce a 301 Location header
with a misleading target.  Vulnerability discovered, and logic fix
proposed, by Hamza Avvan (@hamzaavvan).

Test and comments authored by Gregory P. Smith [Google].
(cherry picked from commit 4abab6b603)

Co-authored-by: Gregory P. Smith <greg@krypto.org>

2022-06-21 14:36:55 -07:00

..

__init__.py

…

client.py

…

cookiejar.py

…

cookies.py

…

server.py

gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879)

2022-06-21 14:36:55 -07:00