diff options
| author | Serhiy Storchaka <storchaka@gmail.com> | 2017-06-25 06:49:15 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-06-25 06:49:15 (GMT) |
| commit | 9c2dc0c58a878ac3d1c44dd0048f8e1cfab2790e (patch) | |
| tree | 209a2e6a745b9e1aecdca7b62486fa1360a4e70d /Misc/NEWS | |
| parent | 57ee0c8c9e73c3405a0343e1a05cba673ac7f8cb (diff) | |
| download | cpython-9c2dc0c58a878ac3d1c44dd0048f8e1cfab2790e.zip cpython-9c2dc0c58a878ac3d1c44dd0048f8e1cfab2790e.tar.gz cpython-9c2dc0c58a878ac3d1c44dd0048f8e1cfab2790e.tar.bz2 | |
[3.6] bpo-30746: Prohibited the '=' character in environment variable names (GH-2382) (#2391)
in `os.putenv()` and `os.spawn*()`..
(cherry picked from commit 77703942c5997dff00c48f10df1b29b11645624c)
Diffstat (limited to 'Misc/NEWS')
| -rw-r--r-- | Misc/NEWS | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -13,6 +13,9 @@ Core and Builtins Library ------- +- bpo-30746: Prohibited the '=' character in environment variable names in + ``os.putenv()`` and ``os.spawn*()``. + - [Security] bpo-30730: Prevent environment variables injection in subprocess on Windows. Prevent passing other environment variables and command arguments. |