scripts/http_server_auth.py: Add support for reading files on HTTP GET

[TheSomeMan]

No description provided.

[ojousima]

This should guard against server giving out files outside of the file root. If I'm understanding the code correctly, someone could run GET ~/secret_file and server would return it.

Chances of it happening are low, but better to not leave such openings just in case.

[TheSomeMan]

This should guard against server giving out files outside of the file root. If I'm understanding the code correctly, someone could run GET ~/secret_file and server would return it.

Chances of it happening are low, but better to not leave such openings just in case.

I checked how it works for the paths with '..' or '~'. SimpleHTTPRequestHandler class has built-in measures to prevent directory traversal attacks, so we don't need to sanitize the path to ensure that it cannot navigate outside the current directory.
I added a comment to the code.

[ojousima]

Thanks