[issue42641] Deprecate os.popen() function

STINNER Victor report at bugs.python.org
Mon Dec 14 18:01:17 EST 2020


STINNER Victor <vstinner at python.org> added the comment:

In the past, multiple os.popen() usage have been replaced with subprocess in the stdlib to prevent the risk of shell injection:

* bpo-22636: ctypes modules
* bpo-22637: uuid module

By the way, there is an open issue bpo-21557 "os.popen & os.system lack shell-related security warnings".

See also bpo-6490 "os.popen documentation is probably wrong" (fixed).

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue42641>
_______________________________________


More information about the Python-bugs-list mailing list