[Twisted-Python] Re: [Twisted-commits] log stderr and non-zero exit code in CGIs, don't show info to users as it is a security risk (closes issue #241)

[Itamar Shtull-Trauring]

On Thu, 28 Aug 2003 19:16:09 -0500
Glyph Lefkowitz <glyph at twistedmatrix.com> wrote:

> Also, could you clarify the security risk of displaying stderr from
> CGI scripts?  I've never heard of a CGI that puts security-critical 
> information on stderr rather than stdout and makes it a risk to
> display to users.

If it's a python script it's probably going to be a traceback.

Also, I don't care about the Perl FAQ :) If you can't figure out how to
read the exact same info out of a logfile, you shouldn't be trying to
debug a CGI script.

-- 
Itamar Shtull-Trauring    http://itamarst.org/
Available for Python & Twisted consulting