Message 121876 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	v+python
Recipients	v+python
Date	2010-11-21.07:31:56
SpamBayes Score	3.1353574e-07
Marked as misclassified	No
Message-id	<1290324717.4.0.0270982528857.issue10484@psf.upfronthosting.co.za>
In-reply-to

Content
is_cgi doesn't properly handle PATH_INFO parts of the path. The Python2.x CGIHTTPServer.py had this right, but the introduction and use of _url_collapse_path_split broke it. _url_collapse_path_split splits the URL into a two parts, the second part is guaranteed to be a single path component, and the first part is the rest. However, URLs such as /cgi-bin/foo.exe/this/is/PATH_INFO/parameters can and do want to exist, but the code in is_cgi will never properly detect that /cgi-bin/foo.exe is the appropriate executable, and the rest should be PATH_INFO. This used to work correctly in the precedecessor CGIHTTPServer.py code in Python 2.6, so is a regression.

is_cgi doesn't properly handle PATH_INFO parts of the path.  The Python2.x CGIHTTPServer.py had this right, but the introduction and use of _url_collapse_path_split broke it.

_url_collapse_path_split splits the URL into a two parts, the second part is guaranteed to be a single path component, and the first part is the rest.  However, URLs such as

/cgi-bin/foo.exe/this/is/PATH_INFO/parameters

can and do want to exist, but the code in is_cgi will never properly detect that /cgi-bin/foo.exe is the appropriate executable, and the rest should be PATH_INFO.

This used to work correctly in the precedecessor CGIHTTPServer.py code in Python 2.6, so is a regression.

History
Date	User	Action	Args
2010-11-21 07:31:57	v+python	set	recipients: + v+python
2010-11-21 07:31:57	v+python	set	messageid: <1290324717.4.0.0270982528857.issue10484@psf.upfronthosting.co.za>
2010-11-21 07:31:56	v+python	link	issue10484 messages
2010-11-21 07:31:56	v+python	create