Changeset 919
- Timestamp:
- 01/10/06 09:15:52
- Files:
-
- tags/cherrypy-2.1.1/CHANGELOG.txt (modified) (1 diff)
- tags/cherrypy-2.1.1/cherrypy/__init__.py (modified) (1 diff)
- tags/cherrypy-2.1.1/cherrypy/_cpwsgiserver.py (modified) (1 diff)
- tags/cherrypy-2.1.1/cherrypy/lib/filter/staticfilter.py (modified) (2 diffs)
- tags/cherrypy-2.1.1/setup.py (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
tags/cherrypy-2.1.1/CHANGELOG.txt
r744 r919 1 2006-01-10: 2 * CherryPy-2.1.1 released 3 * Patch for serious security flaw in staticfilter 4 1 5 2005-10-21: 2 6 * CherryPy-2.1.0 released tags/cherrypy-2.1.1/cherrypy/__init__.py
r744 r919 31 31 """ 32 32 33 __version__ = '2.1. 0'33 __version__ = '2.1.1' 34 34 35 35 import datetime tags/cherrypy-2.1.1/cherrypy/_cpwsgiserver.py
r744 r919 273 273 class CherryPyWSGIServer(object): 274 274 275 version = "CherryPy/2.1. 0"275 version = "CherryPy/2.1.1" 276 276 ready = False 277 277 interrupt = None tags/cherrypy-2.1.1/cherrypy/lib/filter/staticfilter.py
r580 r919 36 36 37 37 def beforeMain(self): 38 from cherrypy import config, request 38 from cherrypy import config, request, HTTPError 39 39 from cherrypy.lib import cptools 40 40 … … 58 58 extraPath = extraPath.lstrip(r"\/") 59 59 extraPath = urllib.unquote(extraPath) 60 if '..' in extraPath: 61 # Disallow ".." in path otherwise this is a security flaw 62 raise HTTPError(403) # Forbidden 60 63 filename = os.path.join(staticDir, extraPath) 61 64 tags/cherrypy-2.1.1/setup.py
r744 r919 19 19 ############################################################################### 20 20 name = "CherryPy" 21 version = "2.1. 0"21 version = "2.1.1" 22 22 desc = "Object-Oriented web development framework" 23 23 long_desc = "CherryPy is a pythonic, object-oriented web development framework" … … 38 38 "cherrypy.tutorial", "cherrypy.test", 39 39 ] 40 download_url="http://sourceforge.net/project/showfiles.php?group_id=56099"41 40 data_files=[ 42 41 ('cherrypy/tutorial', … … 80 79 license=cp_license, 81 80 packages=packages, 82 download_url=download_url,83 81 data_files=data_files, 84 82 )
