Brian Warner 5a5ba643e6 use twisted.web.static, not nevow.static, for public_html/ ... This avoids a privacy leak when the web.static= directory is configured but doesn't exist (which is almost always, since we set `web.static = public_html` in the default config file, but nothing automatically creates it). The nevow.static.File class tries to os.stat() the directory before doing anything else, which causes an exception, which renders the traceback to the HTTP client as a 500 Internal Server Error, and the traceback includes the full path of the missing public_html directory, which reveals the node's basedir. Plain twisted.web.static.File doesn't do this check, and a missing web.static directory just results in a plain old 404. Closes ticket:1720.		2016-04-28 00:42:59 -07:00
..
1720.bugfix	use twisted.web.static, not nevow.static, for public_html/	2016-04-28 00:42:59 -07:00
2367.removal
2491.config	update config docs, add NEWS snippet	2016-04-26 22:26:31 -07:00
2776.change
2781.packaging	bump Twisted dependency to 16.1.0	2016-04-26 13:56:08 -07:00
PR242.docs	remove pickle-based stats output altogether	2016-04-27 17:27:33 -07:00