[issue32324] [Security] "python3 directory" inserts "directory" at sys.path[0] even in isolated mode

Nick Coghlan report at bugs.python.org
Mon Dec 25 19:19:41 EST 2017


Nick Coghlan <ncoghlan at gmail.com> added the comment:

When executing a sys.path entry, you're executing that *entire* entry (whether it's a directory or zipfile). This isn't a bug, and it isn't in conflict with the assurances offered by isolated mode (it would only be a problem if running "~/code/mydirectory" added "~/code" to sys.path).

----------
resolution:  -> not a bug
stage:  -> resolved
status: open -> closed

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue32324>
_______________________________________


More information about the Python-bugs-list mailing list