delta/cpython-git.git/Lib/http, branch 3.10

[3.10] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104119)

2023-05-09T15:21:53+00:00

gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067)

Do not expose the local server's on-disk location from `SimpleHTTPRequestHandler` when generating a directory index. (unnecessary information disclosure)

---------

(cherry picked from commit c7c3a60c88de61a79ded9fdaf6bc6a29da4efb9a)

Co-authored-by: Ethan Furman 
Co-authored-by: Gregory P. Smith 
Co-authored-by: Jelle Zijlstra

[3.10] gh-103112: Add http.client.HTTPResponse.read docstring and fix pydoc output (GH-103113) (#103120)

2023-03-29T22:30:27+00:00

(cherry picked from commit d052a383f1a0c599c176a12c73a761ca00436d8b)

Co-authored-by: Bernhard Wagner 
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Terry Jan Reedy 
Co-authored-by: Éric

[3.10] gh-100474: Fix handling of dirs named index.html in http.server (GH-100504)

2022-12-24T20:29:21+00:00

Co-authored-by: James Frost

gh-100001: Also escape \s in http.server log messages. (GH-100038)

2022-12-05T22:47:57+00:00

Also \ escape \s in the http.server BaseHTTPRequestHandler.log_message so
that it is technically possible to parse the line and reconstruct what the
original data was.  Without this a \xHH is ambiguious as to if it is a hex
replacement we put in or the characters r"\x" came through in the original
request line.
(cherry picked from commit 7e29398407dbd53b714702abb89aa2fd7baca48a)

Co-authored-by: Gregory P. Smith

gh-100001: Omit control characters in http.server stderr logs. (GH-100002)

2022-12-05T21:16:14+00:00

Replace control characters in http.server.BaseHTTPRequestHandler.log_message with an escaped \xHH sequence to avoid causing problems for the terminal the output is printed to.
(cherry picked from commit d8ab0a4dfa48f881b4ac9ab857d2e9de42f72828)

Co-authored-by: Gregory P. Smith

Document that MozillaCookieJar works for curl's cookie files (GH-91852)

2022-10-03T23:00:40+00:00

MozillaCookieJar works for curl's cookies
(cherry picked from commit 0ea8b925d096629852d1045c2c53ff6ad63199cc)

Co-authored-by: Boris Verkhovskiy

Run Tools/scripts/reindent.py (#94225) (#94291)

2022-06-26T10:39:16+00:00

Reindent files which were not properly formatted (PEP 8: 4 spaces).

Remove also some trailing spaces.

(cherry picked from commit e87ada48a9e5d9d03f9759138869216df0d7383a)

gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879)

2022-06-21T21:36:55+00:00

Fix an open redirection vulnerability in the `http.server` module when
an URI path starts with `//` that could produce a 301 Location header
with a misleading target.  Vulnerability discovered, and logic fix
proposed, by Hamza Avvan (@hamzaavvan).

Test and comments authored by Gregory P. Smith [Google].
(cherry picked from commit 4abab6b603dd38bec1168e9a37c40a48ec89508e)

Co-authored-by: Gregory P. Smith

bpo-46436: Fix command-line option -d/--directory in module http.server (GH-30701)

2022-02-14T20:12:30+00:00

Fix command-line option -d/--directory in http.server main
function that was ignored when combined with --cgi.

Automerge-Triggered-By: GH:merwok
(cherry picked from commit 2d080347d74078a55c47715d232d1ab8dc8cd603)

Co-authored-by: Géry Ogam 

Co-authored-by: Géry Ogam

bpo-45328: Avoid failure in OSs without TCP_NODELAY support (GH-28646) (GH-28771)

2021-10-06T18:29:23+00:00

Operating systems without support for TCP_NODELAY will raise an OSError
when trying to set the socket option, but the show can still go on.
(cherry picked from commit 0571b934f5f9198c3461a7b631d7073ac0a5676f)

Co-authored-by: rtobar