[issue33019] Review usage of environment variables in the stdlib

Benjamin Peterson report at bugs.python.org
Wed Mar 7 17:40:11 EST 2018


Benjamin Peterson <benjamin at python.org> added the comment:

I don't think -E is a security feature. Even if the stdlib was fixed, there's tons of 3rdparty Python code that consumes os.environ.

It seems like if you really cared about not letting the environment influence a Python application, you'd just wrap python in a script that cleans out the environment before execing.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue33019>
_______________________________________


More information about the Python-bugs-list mailing list