New submission from Guido van Rossum <[email protected]>:

The security list received a report about SimpleHTTPServer's list_directory(). 
It needs to add a charset parameter to the Content-type header. This is already 
done in Python 3 (where this code lives in http/server.py) but not in any 
Python 2 versions I can find. A simple backport of the code in Python 3 should 
hopefully suffice.

I'm marking this tentatively as a release blocker, but I don't see it's 
necessary to issue an urgent release. It should just be fixed before the next 
scheduled releases of 2.5, 2.6, 2.7.

----------
messages: 130347
nosy: barry, benjamin.peterson, gvanrossum
priority: release blocker
severity: normal
stage: needs patch
status: open
title: list_directory() in SimpleHTTPServer.py should add charset=... to 
Content-type header
type: security
versions: Python 2.5, Python 2.6, Python 2.7

_______________________________________
Python tracker <[email protected]>
<http://bugs.python.org/issue11442>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to