diff options
| author | Serhiy Storchaka <storchaka@gmail.com> | 2017-06-25 06:49:40 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-06-25 06:49:40 (GMT) |
| commit | 99e9eb6111ef6a11bfff358866c9f2b0c201ac08 (patch) | |
| tree | f3dc284d8762d9fbebd0be694fc83f5266bbb90e /Misc/NEWS | |
| parent | 4b1468f723491a6afc0506128b843d3e82771912 (diff) | |
| download | cpython-99e9eb6111ef6a11bfff358866c9f2b0c201ac08.zip cpython-99e9eb6111ef6a11bfff358866c9f2b0c201ac08.tar.gz cpython-99e9eb6111ef6a11bfff358866c9f2b0c201ac08.tar.bz2 | |
[3.5] bpo-30746: Prohibited the '=' character in environment variable names (GH-2382) (#2392)
in `os.putenv()` and `os.spawn*()`..
(cherry picked from commit 77703942c5997dff00c48f10df1b29b11645624c)
Diffstat (limited to 'Misc/NEWS')
| -rw-r--r-- | Misc/NEWS | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -59,6 +59,9 @@ Extension Modules Library ------- +- bpo-30746: Prohibited the '=' character in environment variable names in + ``os.putenv()`` and ``os.spawn*()``. + - [Security] bpo-30730: Prevent environment variables injection in subprocess on Windows. Prevent passing other environment variables and command arguments. |