diff options
| author | Barry Warsaw <barry@python.org> | 2013-02-20 23:19:55 (GMT) |
|---|---|---|
| committer | Barry Warsaw <barry@python.org> | 2013-02-20 23:19:55 (GMT) |
| commit | f25d95732cc0885d2f90487cade9bc78532c3e89 (patch) | |
| tree | cea062e09e3acd054bcf0b2cf927ed38fbc62dbe /Lib/lib-tk/Tkinter.py | |
| parent | 55f23c4233b95955a3233284f9f0aa988457a7a7 (diff) | |
| download | cpython-f25d95732cc0885d2f90487cade9bc78532c3e89.zip cpython-f25d95732cc0885d2f90487cade9bc78532c3e89.tar.gz cpython-f25d95732cc0885d2f90487cade9bc78532c3e89.tar.bz2 | |
- Issue #16248: Disable code execution from the user's home directory by
tkinter when the -E flag is passed to Python. Patch by Zachary Ware.
Diffstat (limited to 'Lib/lib-tk/Tkinter.py')
| -rw-r--r-- | Lib/lib-tk/Tkinter.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/Lib/lib-tk/Tkinter.py b/Lib/lib-tk/Tkinter.py index 3cce276..ea56331 100644 --- a/Lib/lib-tk/Tkinter.py +++ b/Lib/lib-tk/Tkinter.py @@ -1643,7 +1643,9 @@ class Tk(Misc, Wm): self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use) if useTk: self._loadtk() - self.readprofile(baseName, className) + if not sys.flags.ignore_environment: + # Issue #16248: Honor the -E flag to avoid code injection. + self.readprofile(baseName, className) def loadtk(self): if not self._tkloaded: self.tk.loadtk() |