[Python-checkins] cpython (2.7): note xmlrpclib doesn't verify certs (yet)

[benjamin.peterson]

https://hg.python.org/cpython/rev/8e866c802166
changeset: 93031:8e866c802166
branch: 2.7
parent: 93022:7657cc08d29b
user: Benjamin Peterson <benjamin at python.org>
date: Mon Oct 13 11:53:54 2014 -0400
summary:
note xmlrpclib doesn't verify certs (yet)

files:
Doc/library/xmlrpclib.rst | 5 +++++
1 files changed, 5 insertions(+), 0 deletions(-)


diff --git a/Doc/library/xmlrpclib.rst b/Doc/library/xmlrpclib.rst
--- a/Doc/library/xmlrpclib.rst
+++ b/Doc/library/xmlrpclib.rst
@@ -34,6 +34,11 @@
constructed data. If you need to parse untrusted or unauthenticated data see
:ref:`xml-vulnerabilities`.

+.. warning::
+
+ In the case of https URIS, :mod:`xmlrpclib` does not do any verification of
+ the server's certificate.
+

.. class:: ServerProxy(uri[, transport[, encoding[, verbose[, allow_none[, use_datetime]]]]])