[issue29125] Shell injection via TIX_LIBRARY when using tkinter.tix

Larry Hastings report at bugs.python.org
Fri Jan 6 16:20:04 EST 2017


Larry Hastings added the comment:

I don't understand the fix.  Does this really prevent the injection?

I would fix it this way:

    if tixlib is not None and os.path.exists(tixlib):

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29125>
_______________________________________


More information about the Python-bugs-list mailing list