Senthil Kumaran <sent...@uthcode.com> added the comment:

I had to carefully review a lot of changes for this. In addition, I did setup a 
apache and tested the behaviors too. 

Few notes - 
-  The test for _url_collapse_path_split is not directly helpful, especially 
for PATH_INFO. I removed my previous changes I had made as I think, it is a 
mistake to test PATH_INFO in there.
- There is not a test for path_info, it should be added. I could test only on 
local apache setup.
- Coming the changes itself, the previous _url_collapse_path_split was just 
fine for what it is supposed to do. Return head and tail for certain 
definitions of parsing (removing . and .. and tail is last part and rest is 
head).
- I incorporated Glenn Linderman logic in is_cgi to have explicit head and 
tail. Glenn's comment and cgi directories could overridden is important and in 
that ascept the previous commit had to be changed. I also looked at changes in 
the patches contained in issue 13893, but I found that those broke behavior or 
exhibited the security issue again.

taking care of all these, I have the made the changes to the cgi module and 
also verified pratically that PATH_INFO is indeed sent correctly. 

Ran python -m CGIHttpServer and placed cgi-bin/file1.py  and sent some requests 
to verify PATH_INFO. The values were proper.

With this, I think this issue can be closed. The rest of the cgi changes can be 
handled in their respective issues. A test to PATH_INFO could just be added.

----------
Added file: http://bugs.python.org/file25171/file1.py

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue10484>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to