securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
22 stars 3 forks source link

CGIHTTPRequestHandler not intended for production #400

Open ericwb opened 7 months ago

ericwb commented 7 months ago

Is your feature request related to a problem? Please describe. CGIHTTPRequestHandler and the --cgi command line option are not intended for use by untrusted clients and may be vulnerable to exploitation. Always use within a secure environment.

Describe the solution you'd like New rule ot detect this.

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context https://docs.python.org/3/library/http.server.html

Love this idea? Give it a 👍. We prioritize fulfilling features with the most 👍.