Issue #16248: Disable code execution from the user's home directory by tkinter when the -E flag is passed to Python.

Patch by Zachary Ware.
This commit is contained in:
Antoine Pitrou 2012-12-09 14:46:18 +01:00
parent 24457c9ad3
commit 7ec3a32360
2 changed files with 6 additions and 1 deletions

View File

@ -1698,7 +1698,9 @@ class Tk(Misc, Wm):
self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use)
if useTk:
self._loadtk()
self.readprofile(baseName, className)
if not sys.flags.ignore_environment:
# Issue #16248: Honor the -E flag to avoid code injection.
self.readprofile(baseName, className)
def loadtk(self):
if not self._tkloaded:
self.tk.loadtk()

View File

@ -179,6 +179,9 @@ Core and Builtins
Library
-------
- Issue #16248: Disable code execution from the user's home directory by
tkinter when the -E flag is passed to Python. Patch by Zachary Ware.
- Issue #16628: Fix a memory leak in ctypes.resize().
- Issue #13614: Fix setup.py register failure with invalid rst in description.