[Security] http.server can be abused to redirect to (almost) arbitrary URL #76265
Description
| BPO | 32084 |
|---|---|
| Nosy | @vstinner, @ned-deily, @vadmium, @epicfaace |
| Superseder |
Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.
Show more details
GitHub fields:
assignee = None
closed_at = <Date 2021-05-21.23:10:46.228>
created_at = <Date 2017-11-20.13:49:15.952>
labels = ['type-security', '3.7', 'library']
title = '[Security] http.server can be abused to redirect to (almost) arbitrary URL'
updated_at = <Date 2021-05-21.23:10:46.227>
user = 'https://github.com/vstinner'bugs.python.org fields:
activity = <Date 2021-05-21.23:10:46.227>
actor = 'ned.deily'
assignee = 'none'
closed = True
closed_date = <Date 2021-05-21.23:10:46.228>
closer = 'ned.deily'
components = ['Library (Lib)']
creation = <Date 2017-11-20.13:49:15.952>
creator = 'vstinner'
dependencies = []
files = []
hgrepos = []
issue_num = 32084
keywords = []
message_count = 6.0
messages = ['306540', '306542', '306545', '306992', '322677', '394169']
nosy_count = 4.0
nosy_names = ['vstinner', 'ned.deily', 'martin.panter', 'epicfaace']
pr_nums = []
priority = 'normal'
resolution = 'duplicate'
stage = 'resolved'
status = 'closed'
superseder = '43223'
type = 'security'
url = 'https://bugs.python.org/issue32084'
versions = ['Python 2.7', 'Python 3.4', 'Python 3.5', 'Python 3.6', 'Python 3.7']