[forwarded from http://bugs.debian.org/230572]

In method docmodule() of class HTMLdoc, a href is
produced to the source code of the current module.

First of all, it is produced as a file: URL, so it is
incorrect on any computer other than the server.

Second, it is a minor security breach, because it
displays information about the directory structure of
the computer on which it is running.

Now, normally, you'd run pydoc so that it would only
serve files locally, and the current behavior is not
too bad.  However, the program ought to be made more
flexible so that it can also be used in other ways.

I'd suggest replacing this line:

            filelink = '<a href="file:%s">%s</a>' %
(url, path)

with a function call, so that the behavior of the
program can be easily modified:

	    filelink = source_code_link(url, path)

def source_code_link(url, path):
	...

One could then make the behavior of source_code_link()
controllable from the command line via a global
variable, or just let people who want to modify the
behavior simply replace source_code_link() with their
own function.

The following patch also fixes this along with other improvements. 
Maybe someone can review it.

http://bugs.python.org/issue2001

I would like to see this change introducing a method of class HTMLDoc.

It has already some such methods as:

    def namelink(self, name, *dicts):
    def classlink(self, object, modname):
    def modulelink(self, object):
    def modpkglink(self, data):

So it would be logically to make it a method 
 
    def filelink(self,url,path):
         """Make a link to source file."""
         return '<a href="file:%s">%s</a>' % (url, path)
 
and changing the creating of the filelink to
...
            filelink = self.filelink(url, path)
         except TypeError:
            filelink = '(built-in)'
...

This way one can easily subclass HTMLDoc for own purposes and define a
own filelink method.

Closed as a duplicate of #2001, but please keep in mind msg75324.