Mercurial > cpython-lru_cache-weakref
diff Doc/lib/libcgi.tex @ 18574:346dcafc878b legacy-trunk
Minor changes to match the style guide.
| author | Fred Drake <fdrake@acm.org> |
|---|---|
| date | Sat, 14 Jul 2001 02:50:55 +0000 |
| parents | eeb2e77c5bad |
| children | 5d6b2c17ea2c |
line wrap: on
line diff
--- a/Doc/lib/libcgi.tex Sat Jul 14 02:46:01 2001 +0000 +++ b/Doc/lib/libcgi.tex Sat Jul 14 02:50:55 2001 +0000 @@ -12,7 +12,7 @@ \index{URL} -Support module for CGI (Common Gateway Interface) scripts.% +Support module for Common Gateway Interface (CGI) scripts.% \index{Common Gateway Interface} This module defines a number of utilities for use by CGI scripts @@ -294,7 +294,7 @@ \function{os.system()} or \function{os.popen()} functions. or others with similar functionality), make very sure you don't pass arbitrary strings received from the client to the shell. This is a well-known -security hole whereby clever hackers anywhere on the web can exploit a +security hole whereby clever hackers anywhere on the Web can exploit a gullible CGI script to invoke arbitrary shell commands. Even parts of the URL or field names cannot be trusted, since the request doesn't have to come from your form! @@ -330,7 +330,7 @@ (write, execute) files that everybody can read (write, execute). The current directory at execution time is also different (it is usually the server's cgi-bin directory) and the set of environment variables -is also different from what you get at login. In particular, don't +is also different from what you get when you log in. In particular, don't count on the shell's search path for executables (\envvar{PATH}) or the Python module search path (\envvar{PYTHONPATH}) to be set to anything interesting.
