/usr/share/doc/python-restless-doc/html/security.html is in python-restless-doc 2.0.1-5.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Security — restless 2.0.1 documentation</title>
<link rel="stylesheet" href="_static/classic.css" type="text/css" />
<link rel="stylesheet" href="_static/pygments.css" type="text/css" />
<script type="text/javascript">
var DOCUMENTATION_OPTIONS = {
URL_ROOT: './',
VERSION: '2.0.1',
COLLAPSE_INDEX: false,
FILE_SUFFIX: '.html',
HAS_SOURCE: true
};
</script>
<script type="text/javascript" src="_static/jquery.js"></script>
<script type="text/javascript" src="_static/underscore.js"></script>
<script type="text/javascript" src="_static/doctools.js"></script>
<link rel="top" title="restless 2.0.1 documentation" href="index.html" />
<link rel="next" title="Constants" href="reference/constants.html" />
<link rel="prev" title="Contributing" href="contributing.html" />
</head>
<body role="document">
<div class="related" role="navigation" aria-label="related navigation">
<h3>Navigation</h3>
<ul>
<li class="right" style="margin-right: 10px">
<a href="genindex.html" title="General Index"
accesskey="I">index</a></li>
<li class="right" >
<a href="py-modindex.html" title="Python Module Index"
>modules</a> |</li>
<li class="right" >
<a href="reference/constants.html" title="Constants"
accesskey="N">next</a> |</li>
<li class="right" >
<a href="contributing.html" title="Contributing"
accesskey="P">previous</a> |</li>
<li class="nav-item nav-item-0"><a href="index.html">restless 2.0.1 documentation</a> »</li>
</ul>
</div>
<div class="document">
<div class="documentwrapper">
<div class="bodywrapper">
<div class="body" role="main">
<div class="section" id="security">
<span id="id1"></span><h1>Security<a class="headerlink" href="#security" title="Permalink to this headline">ΒΆ</a></h1>
<p>Restless takes security seriously. By default, it:</p>
<ul class="simple">
<li>does not access your filesystem in any way.</li>
<li>only allows GET requests, demanding that the user think about who should be
able to work with a given endpoint.</li>
<li>has <code class="docutils literal"><span class="pre">is_debug</span></code> as <code class="docutils literal"><span class="pre">False</span></code> by default.</li>
<li>wraps JSON lists in an object to prevent exploits.</li>
</ul>
<p>While no known vulnerabilities exist, all software has bugs & Restless is no
exception.</p>
<p>If you believe you have found a security-related issue, please <strong>DO NOT SUBMIT
AN ISSUE/PULL REQUEST</strong>. This would be a public disclosure & would allow for
0-day exploits.</p>
<p>Instead, please send an email to “<a class="reference external" href="mailto:daniel%40toastdriven.com">daniel<span>@</span>toastdriven<span>.</span>com</a>” & include the
following information:</p>
<ul class="simple">
<li>A description of the problem/suggestion.</li>
<li>How to recreate the bug.</li>
<li>If relevant, including the versions of your:<ul>
<li>Python interpreter</li>
<li>Web framework</li>
<li>Restless</li>
<li>Optionally of the other dependencies involved</li>
</ul>
</li>
</ul>
<p>Please bear in mind that I’m not a security expert/researcher, so a layman’s
description of the issue is very important.</p>
<p>Upon reproduction of the exploit, steps will be taken to fix the issue, release
a new version & make users aware of the need to upgrade. Proper credit for the
discovery of the issue will be granted via the AUTHORS file & other mentions.</p>
</div>
</div>
</div>
</div>
<div class="sphinxsidebar" role="navigation" aria-label="main navigation">
<div class="sphinxsidebarwrapper">
<h4>Previous topic</h4>
<p class="topless"><a href="contributing.html"
title="previous chapter">Contributing</a></p>
<h4>Next topic</h4>
<p class="topless"><a href="reference/constants.html"
title="next chapter">Constants</a></p>
<div role="note" aria-label="source link">
<h3>This Page</h3>
<ul class="this-page-menu">
<li><a href="_sources/security.txt"
rel="nofollow">Show Source</a></li>
</ul>
</div>
<div id="searchbox" style="display: none" role="search">
<h3>Quick search</h3>
<form class="search" action="search.html" method="get">
<input type="text" name="q" />
<input type="submit" value="Go" />
<input type="hidden" name="check_keywords" value="yes" />
<input type="hidden" name="area" value="default" />
</form>
<p class="searchtip" style="font-size: 90%">
Enter search terms or a module, class or function name.
</p>
</div>
<script type="text/javascript">$('#searchbox').show(0);</script>
</div>
</div>
<div class="clearer"></div>
</div>
<div class="related" role="navigation" aria-label="related navigation">
<h3>Navigation</h3>
<ul>
<li class="right" style="margin-right: 10px">
<a href="genindex.html" title="General Index"
>index</a></li>
<li class="right" >
<a href="py-modindex.html" title="Python Module Index"
>modules</a> |</li>
<li class="right" >
<a href="reference/constants.html" title="Constants"
>next</a> |</li>
<li class="right" >
<a href="contributing.html" title="Contributing"
>previous</a> |</li>
<li class="nav-item nav-item-0"><a href="index.html">restless 2.0.1 documentation</a> »</li>
</ul>
</div>
<div class="footer" role="contentinfo">
© Copyright 2014, Daniel Lindsley.
Created using <a href="http://sphinx-doc.org/">Sphinx</a> 1.3.3.
</div>
</body>
</html>
|