mirror of
https://github.com/python/cpython.git
synced 2025-08-31 05:58:33 +00:00
bpo-31672: Fix string.Template accidentally matched non-ASCII identifiers (GH-3872)
Pattern `[a-z]` with `IGNORECASE` flag can match to some non-ASCII characters. Straightforward solution for this is using `IGNORECASE | ASCII` flag. But users may subclass `Template` and override only `idpattern`. So we want to avoid changing `Template.flags`. So this commit uses local flag `-i` for `idpattern` and change `[a-z]` to `[a-zA-Z]`.
This commit is contained in:
parent
9255104499
commit
b22273ec5d
4 changed files with 24 additions and 3 deletions
|
@ -79,7 +79,11 @@ class Template(metaclass=_TemplateMetaclass):
|
|||
"""A string class for supporting $-substitutions."""
|
||||
|
||||
delimiter = '$'
|
||||
idpattern = r'[_a-z][_a-z0-9]*'
|
||||
# r'[a-z]' matches to non-ASCII letters when used with IGNORECASE,
|
||||
# but without ASCII flag. We can't add re.ASCII to flags because of
|
||||
# backward compatibility. So we use local -i flag and [a-zA-Z] pattern.
|
||||
# See https://bugs.python.org/issue31672
|
||||
idpattern = r'(?-i:[_a-zA-Z][_a-zA-Z0-9]*)'
|
||||
braceidpattern = None
|
||||
flags = _re.IGNORECASE
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue