$NetBSD: patch-Lib_test_test__httpservers.py,v 1.2.2.2 2014/07/05 11:13:52 tron Exp $

Test case for directory traversal vulnerability, ref.
http://bugs.python.org/issue21766

--- Lib/test/test_httpservers.py.orig	2014-06-09 11:29:38.000000000 +0000
+++ Lib/test/test_httpservers.py
@@ -510,6 +510,11 @@ class CGIHTTPServerTestCase(BaseTestCase
                 (res.read(), res.getheader('Content-type'), res.status))
         self.assertEqual(os.environ['SERVER_SOFTWARE'], signature)
 
+    def test_urlquote_decoding_in_cgi_check(self):
+       	res = self.request('/cgi-bin%2ffile1.py')
+        self.assertEqual((b'Hello World\n', 'text/html', 200),
+                (res.read(), res.getheader('Content-type'), res.status))
+
 
 class SimpleHTTPRequestHandlerTestCase(unittest.TestCase):
     """ Test url parsing """