pythongh-104711: Add security warning to the CGIHTTPRequestHandler do…

…cument (pythonGH-115915)
diegorusso · Apr 17, 2024 · 7f8fe69 · 7f8fe69
1 parent b4f992a
commit 7f8fe69
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst
@@ -520,6 +520,12 @@ the ``--cgi`` option::
    :mod:`http.server` command line ``--cgi`` support is being removed
    because :class:`CGIHTTPRequestHandler` is being removed.
 
+.. warning::
+
+   :class:`CGIHTTPRequestHandler` and the ``--cgi`` command line option
+   are not intended for use by untrusted clients and may be vulnerable
+   to exploitation. Always use within a secure environment.
+
 .. _http.server-security:
 
 Security Considerations