[issue23952] Document the 'maxlen' member of the cgi module

2015-04-14 Thread Rob King
New submission from Rob King: The cgi module has a global variable, 'maxlen', that specifies the maximum length of a POST request. By default, this limit is 0, meaning an unlimited POST request size. Having an unlimited default opens up CGI scripts to resource-exhaustion attacks. S

[issue23952] Document the 'maxlen' member of the cgi module

2015-04-14 Thread Rob King
Changes by Rob King : -- versions: +Python 2.7, Python 3.2, Python 3.3 ___ Python tracker <http://bugs.python.org/issue23952> ___ ___ Python-bugs-list mailin

[issue23950] Odd behavior with "file" and "filename" attributes in cgi.FieldStorage

2015-04-14 Thread Rob King
New submission from Rob King: Hello, everyone. I've noticed an issue that could be just a documentation inaccuracy or a genuine, minor bug in cgi.FieldStorage. The documentation for the module states: "You can test for an uploaded file by testing either the filename attribute or