mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-09-26 18:29:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

- Issue #16248: Disable code execution from the user's home directory by

Browse source 
tkinter when the -E flag is passed to Python.  Patch by Zachary Ware.
This commit is contained in:
Barry Warsaw 2013-02-20 18:19:55 -05:00
parent 55f23c4233
commit f25d95732c
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Lib/lib-tk/Tkinter.py
View file

@ -1643,6 +1643,8 @@ class Tk(Misc, Wm):
self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use) self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use)
if useTk: if useTk:
self._loadtk() self._loadtk()
if not sys.flags.ignore_environment:
# Issue #16248: Honor the -E flag to avoid code injection.
self.readprofile(baseName, className) self.readprofile(baseName, className)
def loadtk(self): def loadtk(self):
if not self._tkloaded: if not self._tkloaded:

3
Misc/NEWS
View file

@ -13,6 +13,9 @@ Core and Builtins
Library Library
------- -------
- Issue #16248: Disable code execution from the user's home directory by
tkinter when the -E flag is passed to Python. Patch by Zachary Ware.
What's New in Python 2.6.8? What's New in Python 2.6.8?
=========================== ===========================