From fa6521b4fd72a6b2e959549792c390f6d77e72fe Mon Sep 17 00:00:00 2001 From: Brett Cannon Date: Fri, 16 Feb 2007 19:33:01 +0000 Subject: Make the __import__ call in encodings.__init__ absolute with a level 0 call. --- Lib/encodings/__init__.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Lib/encodings/__init__.py b/Lib/encodings/__init__.py index 190b3c4..7db44cb 100644 --- a/Lib/encodings/__init__.py +++ b/Lib/encodings/__init__.py @@ -93,10 +93,10 @@ def search_function(encoding): if not modname or '.' in modname: continue try: - # Import equivalent to `` from .modname import *``. - # '*' is used so that __import__ returns the desired module and not - # 'encodings' itself. - mod = __import__(modname, globals(), locals(), ['*'], 1) + # Import is absolute to prevent the possibly malicious import of a + # module with side-effects that is not in the 'encodings' package. + mod = __import__('encodings.' + modname, fromlist=_import_tail, + level=0) except ImportError: pass else: -- cgit v0.12