static-http 0.1.1__tar.gz → 0.1.3__tar.gz

{static_http-0.1.1 → static_http-0.1.3}/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 http-here contributors
+Copyright (c) 2026 John Paul Ellis
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

{static_http-0.1.1 → static_http-0.1.3}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: static-http
-Version: 0.1.1
+Version: 0.1.3
 Summary: A temporary dependency-free static HTTP server with byte-range support.
-Author: static-http contributors
+Author: John Paul Ellis
 License: MIT
 Keywords: http,server,static-http,static,range,cli
 Classifier: License :: OSI Approved :: MIT License
@@ -72,6 +72,7 @@ By default:
 - `--no-cache` — send `Cache-Control: no-store`.
 - `--quiet` — suppress per-request logs.
 - `--verbose` — print detailed startup/binding information.
+- `--include-hidden` — include dot-prefixed files and directories in normal serving and directory listings.
 - `--version` — print package version and exit.
 
 ## Examples
@@ -82,6 +83,7 @@ static-http --qr
 static-http --no-cache
 static-http --quiet
 static-http --verbose
+static-http --include-hidden
 static-http --port 9000 --cors
 static-http --no-dir-list
 ```

{static_http-0.1.1 → static_http-0.1.3}/README.md

@@ -50,6 +50,7 @@ By default:
 - `--no-cache` — send `Cache-Control: no-store`.
 - `--quiet` — suppress per-request logs.
 - `--verbose` — print detailed startup/binding information.
+- `--include-hidden` — include dot-prefixed files and directories in normal serving and directory listings.
 - `--version` — print package version and exit.
 
 ## Examples
@@ -60,6 +61,7 @@ static-http --qr
 static-http --no-cache
 static-http --quiet
 static-http --verbose
+static-http --include-hidden
 static-http --port 9000 --cors
 static-http --no-dir-list
 ```

{static_http-0.1.1 → static_http-0.1.3}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "static-http"
-version = "0.1.1"
+version = "0.1.3"
 description = "A temporary dependency-free static HTTP server with byte-range support."
 readme = "README.md"
 requires-python = ">=3.10"
 license = { text = "MIT" }
-authors = [{ name = "static-http contributors" }]
+authors = [{ name = "John Paul Ellis" }]
 dependencies = []
 keywords = ["http", "server", "static-http", "static", "range", "cli"]
 classifiers = [

{static_http-0.1.1 → static_http-0.1.3}/src/http_here/__init__.py

@@ -1,3 +1,3 @@
 """Utilities for running a dependency-free local static HTTP server."""
 
-__version__ = "0.1.1"
+__version__ = "0.1.3"

{static_http-0.1.1 → static_http-0.1.3}/src/http_here/cli.py

@@ -125,6 +125,11 @@ def _build_parser() -> argparse.ArgumentParser:
         action="store_true",
         help="Print extra startup and binding information.",
     )
+    parser.add_argument(
+        "--include-hidden",
+        action="store_true",
+        help="Include dot-prefixed files/directories when serving and listing directories.",
+    )
     parser.add_argument(
         "--version",
         action="version",
@@ -166,12 +171,14 @@ def main(argv: list[str] | None = None) -> int:
     bind_port = args.port
 
     response_headers = build_response_headers(cors=args.cors, no_cache=args.no_cache, headers=args.header)
+    effective_quiet = args.quiet or not args.verbose
 
     handler = make_handler(
         directory=root,
         extra_headers=response_headers,
         disable_dir_list=args.no_dir_list,
-        quiet=args.quiet,
+        quiet=effective_quiet,
+        show_hidden=args.include_hidden,
     )
 
     try:
@@ -180,6 +187,8 @@ def main(argv: list[str] | None = None) -> int:
         print(f"Could not bind {bind_host}:{bind_port}: {exc}", file=sys.stderr)
         return 1
 
+    server.verbose = bool(args.verbose)
+
     actual_bind = server.server_address[0]
     actual_port = server.server_address[1]
     discovered_lan = urls.discover_lan_urls() if urls.is_all_interfaces_bind(actual_bind) else []

{static_http-0.1.1 → static_http-0.1.3}/src/http_here/server.py

@@ -3,7 +3,9 @@
 from __future__ import annotations
 
 import io
+import html
 import os
+import sys
 import posixpath
 import stat
 import urllib.parse
@@ -26,11 +28,13 @@ class RangeAwareHTTPRequestHandler(SimpleHTTPRequestHandler):
         extra_headers: Mapping[str, str],
         disable_dir_list: bool,
         quiet: bool,
+        show_hidden: bool,
         **kwargs,
     ) -> None:
         self._extra_headers = dict(extra_headers)
         self._disable_dir_list = disable_dir_list
         self._quiet = quiet
+        self._show_hidden = show_hidden
         super().__init__(*args, directory=directory, **kwargs)
 
     def _add_custom_headers(self) -> None:
@@ -42,6 +46,16 @@ class RangeAwareHTTPRequestHandler(SimpleHTTPRequestHandler):
             return
         super().log_message(format, *args)
 
+    def log_error(self, format: str, *args) -> None:
+        if self._quiet:
+            return
+        super().log_error(format, *args)
+
+    def _is_hidden(self, segment: str) -> bool:
+        if self._show_hidden:
+            return False
+        return segment.startswith(".")
+
     def translate_path(self, path: str) -> str | None:
         # Safe path mapping inspired by SimpleHTTPRequestHandler, with strict traversal defense.
         path = path.split("?", 1)[0]
@@ -61,6 +75,8 @@ class RangeAwareHTTPRequestHandler(SimpleHTTPRequestHandler):
                     continue
                 if segment == "..":
                     continue
+                if self._is_hidden(segment):
+                    return None
                 if ":" in segment:
                     return None
                 parts.append(segment)
@@ -183,6 +199,65 @@ class RangeAwareHTTPRequestHandler(SimpleHTTPRequestHandler):
             f.close()
             raise
 
+    def list_directory(self, path: str) -> io.BytesIO | None:
+        if self._show_hidden:
+            return super().list_directory(path)
+
+        try:
+            listdir = os.listdir(path)
+        except OSError:
+            self.send_error(HTTPStatus.NOT_FOUND, "No permission to list directory")
+            return None
+
+        listdir = [entry for entry in listdir if not self._is_hidden(entry)]
+        if not listdir:
+            self.send_error(HTTPStatus.NOT_FOUND, "No visible files")
+            return None
+
+        listdir.sort(key=lambda a: a.lower())
+        r = []
+
+        try:
+            displaypath = urllib.parse.unquote(self.path, errors="surrogatepass")
+        except UnicodeDecodeError:
+            displaypath = urllib.parse.unquote(self.path)
+        displaypath = html.escape(displaypath)
+
+        enc = "UTF-8"
+        title = f"Directory listing for {displaypath}"
+        r.append("<!DOCTYPE html>\n")
+        r.append("<html>\n<head>\n")
+        r.append(f'<meta charset="{enc}">\n')
+        r.append(f"<title>{title}</title>\n")
+        r.append("</head>\n<body>\n")
+        r.append(f"<h1>{title}</h1>\n<hr>\n<ul>\n")
+
+        for name in listdir:
+            full_name = os.path.join(path, name)
+            displayname = linkname = name
+            if os.path.isdir(full_name):
+                displayname = name + "/"
+                linkname = name + "/"
+            if os.path.islink(full_name):
+                displayname = name + "@"
+
+            r.append(
+                f'<li><a href="{urllib.parse.quote(linkname, errors="surrogatepass")}">'
+                f"{html.escape(displayname)}</a></li>\n"
+            )
+
+        r.append("</ul>\n<hr>\n</body>\n</html>\n")
+        encoded = "".join(r).encode(enc, "surrogateescape")
+
+        f = io.BytesIO()
+        f.write(encoded)
+        f.seek(0)
+        self.send_response(HTTPStatus.OK)
+        self.send_header("Content-Type", f"text/html; charset={enc}")
+        self.send_header("Content-Length", str(len(encoded)))
+        self.end_headers()
+        return f
+
 
 class _RangeFile:
     def __init__(self, wrapped: io.BufferedReader, remaining: int) -> None:
@@ -206,8 +281,17 @@ class ThreadedHTTPServer(ThreadingHTTPServer):
     daemon_threads = True
     allow_reuse_address = True
 
+    def handle_error(self, request, client_address) -> None:  # type: ignore[override]
+        exc = sys.exc_info()[1]
+        if (
+            not bool(getattr(self, "verbose", False))
+            and isinstance(exc, (BrokenPipeError, ConnectionAbortedError, ConnectionResetError))
+        ):
+            return
+        super().handle_error(request, client_address)
+
 
-def make_handler(*, directory: str, extra_headers: Mapping[str, str], disable_dir_list: bool, quiet: bool):
+def make_handler(*, directory: str, extra_headers: Mapping[str, str], disable_dir_list: bool, quiet: bool, show_hidden: bool = False):
     def _factory(*args, **kwargs):
         return RangeAwareHTTPRequestHandler(
             *args,
@@ -215,6 +299,7 @@ def make_handler(*, directory: str, extra_headers: Mapping[str, str], disable_di
             extra_headers=extra_headers,
             disable_dir_list=disable_dir_list,
             quiet=quiet,
+            show_hidden=show_hidden,
             **kwargs,
         )
 

{static_http-0.1.1 → static_http-0.1.3}/src/static_http.egg-info/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: static-http
-Version: 0.1.1
+Version: 0.1.3
 Summary: A temporary dependency-free static HTTP server with byte-range support.
-Author: static-http contributors
+Author: John Paul Ellis
 License: MIT
 Keywords: http,server,static-http,static,range,cli
 Classifier: License :: OSI Approved :: MIT License
@@ -72,6 +72,7 @@ By default:
 - `--no-cache` — send `Cache-Control: no-store`.
 - `--quiet` — suppress per-request logs.
 - `--verbose` — print detailed startup/binding information.
+- `--include-hidden` — include dot-prefixed files and directories in normal serving and directory listings.
 - `--version` — print package version and exit.
 
 ## Examples
@@ -82,6 +83,7 @@ static-http --qr
 static-http --no-cache
 static-http --quiet
 static-http --verbose
+static-http --include-hidden
 static-http --port 9000 --cors
 static-http --no-dir-list
 ```

{static_http-0.1.1 → static_http-0.1.3}/tests/test_server.py

@@ -89,6 +89,7 @@ def test_headers_and_directory_listing_controls(tmp_path: Path) -> None:
     root.mkdir()
     (root / "index.txt").write_bytes(b"index")
     (tmp_path / "a b.txt").write_bytes(b"space")
+    (tmp_path / ".hidden.txt").write_bytes(b"secret")
     (tmp_path / "rootdir").mkdir()
 
     with _running_server(
@@ -110,6 +111,10 @@ def test_headers_and_directory_listing_controls(tmp_path: Path) -> None:
             assert resp.headers["Access-Control-Allow-Origin"] == "*"
             assert resp.headers["Cache-Control"] == "no-store"
 
+        with pytest.raises(urllib.error.HTTPError) as exc:
+            urllib.request.urlopen(_http_url(srv, "/.hidden.txt"))
+        assert exc.value.code in {400, 404}
+
     with _running_server(
         tmp_path,
         extra_headers={},
@@ -121,6 +126,27 @@ def test_headers_and_directory_listing_controls(tmp_path: Path) -> None:
         assert exc.value.code == 403
 
 
+def test_show_hidden_flag_exposes_hidden_entries(tmp_path: Path) -> None:
+    (tmp_path / ".hidden.txt").write_bytes(b"secret")
+
+    with _running_server(
+        tmp_path,
+        extra_headers={},
+        disable_dir_list=False,
+        quiet=True,
+        show_hidden=True,
+    ) as srv:
+        list_url = _http_url(srv, "/")
+        with urllib.request.urlopen(list_url) as resp:
+            assert resp.status == 200
+            body = resp.read()
+            assert b".hidden.txt" in body
+
+        with urllib.request.urlopen(_http_url(srv, "/.hidden.txt")) as resp:
+            assert resp.status == 200
+            assert resp.read() == b"secret"
+
+
 def test_path_traversal_cannot_escape_root(tmp_path: Path) -> None:
     (tmp_path / "inside.txt").write_bytes(b"inside")
     (tmp_path.parent / "outside.txt").write_bytes(b"outside")