diff --git a/Doc/library/http.server.rst b/Doc/library/http.server.rst index fd6d7cb4ee1c40..8bd22eac831af3 100644 --- a/Doc/library/http.server.rst +++ b/Doc/library/http.server.rst @@ -503,6 +503,8 @@ to be served. Earlier versions of Python did not scrub control characters from the log messages emitted to stderr from ``python -m http.server`` or the default :class:`BaseHTTPRequestHandler` ``.log_message`` -implementation. This could allow to remote clients connecting to your +implementation. This could allow remote clients connecting to your server to send nefarious control codes to your terminal. +.. versionadded:: 3.10.9 + Control characters are scrubbed in stderr logs.