Mercurial > cpython-lru_cache-weakref
diff Doc/lib/libcgi.tex @ 30842:fe9a5a2dd2c1 2.3
Avoid giving advice that's bad for security, as per SF bug #823515
| author | Alex Martelli <aleaxit@gmail.com> |
|---|---|
| date | Sun, 02 Nov 2003 16:31:22 +0000 |
| parents | 523c3d61dbdd |
| children | a15115290e13 |
line wrap: on
line diff
--- a/Doc/lib/libcgi.tex Sun Nov 02 16:11:48 2003 +0000 +++ b/Doc/lib/libcgi.tex Sun Nov 02 16:31:22 2003 +0000 @@ -598,7 +598,9 @@ usually not set to a very useful value in a CGI script. \item When reading or writing external files, make sure they can be read -or written by every user on the system. +or written by the userid under which your CGI script will be running: +this is typically the userid under which the web server is running, or some +explicitly specified userid for a web server's \samp{suexec} feature. \item Don't try to give a CGI script a set-uid mode. This doesn't work on most systems, and is a security liability as well.
