[issue34624] -W option and PYTHONWARNINGS env variable does not accept module regexes

[STINNER Victor]

STINNER Victor <vstinner at python.org> added the comment:

> Adding regular expression support to -W and PYTHONWARNINGS env var turns the options into potential attack vectors.

Why would an attacker control these options?

If an attacker controls how Python is run, they are more efficient way to take control of Python and execute arbitrary code, than just trigger a denial of service, no

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34624>
_______________________________________