[issue36021] [Security][Windows] webbrowser: WindowsDefault uses os.startfile() and so can be abused to run arbitrary commands

Stéphane Wirtel report at bugs.python.org
Wed Feb 20 01:45:44 EST 2019


Stéphane Wirtel <stephane at wirtel.be> added the comment:

Hi @eryk, @vstinner and @steve,

I think I could not work on this issue today, but will continue to fix it asap (tomorrow or on this evening).

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue36021>
_______________________________________


More information about the Python-bugs-list mailing list