diff options
| author | Antoine Pitrou <solipsis@pitrou.net> | 2012-12-09 13:46:18 (GMT) |
|---|---|---|
| committer | Antoine Pitrou <solipsis@pitrou.net> | 2012-12-09 13:46:18 (GMT) |
| commit | 0ee20ebbff9624017709c35f2fe0a4e163ed9007 (patch) | |
| tree | d88fb7c16672a0b31b7ca85c9113dfb67ffc08b3 /Lib | |
| parent | 2fd0b1a1b95604c74968a10e5fda222655c0b52d (diff) | |
| download | cpython-0ee20ebbff9624017709c35f2fe0a4e163ed9007.zip cpython-0ee20ebbff9624017709c35f2fe0a4e163ed9007.tar.gz cpython-0ee20ebbff9624017709c35f2fe0a4e163ed9007.tar.bz2 | |
Issue #16248: Disable code execution from the user's home directory by tkinter when the -E flag is passed to Python.
Patch by Zachary Ware.
Diffstat (limited to 'Lib')
| -rw-r--r-- | Lib/tkinter/__init__.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/Lib/tkinter/__init__.py b/Lib/tkinter/__init__.py index 0bccbfc..50e51ab 100644 --- a/Lib/tkinter/__init__.py +++ b/Lib/tkinter/__init__.py @@ -1632,7 +1632,9 @@ class Tk(Misc, Wm): self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use) if useTk: self._loadtk() - self.readprofile(baseName, className) + if not sys.flags.ignore_environment: + # Issue #16248: Honor the -E flag to avoid code injection. + self.readprofile(baseName, className) def loadtk(self): if not self._tkloaded: self.tk.loadtk() |