diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst index 154f3f3c39049f..6a564400708186 100644 --- a/Doc/library/http.server.rst +++ b/Doc/library/http.server.rst @@ -516,6 +516,8 @@ to be served. Earlier versions of Python did not scrub control characters from the log messages emitted to stderr from ``python -m http.server`` or the default :class:`BaseHTTPRequestHandler` ``.log_message`` -implementation. This could allow to remote clients connecting to your +implementation. This could allow remote clients connecting to your server to send nefarious control codes to your terminal. +.. versionadded:: 3.11.1 + Control characters are scrubbed in stderr logs.