New submission from Benjamin Peterson <benja...@python.org>:
disutils.spawn isn't very good at quoting command lines (#8987). We need to use subprocess to avoid shell injection. ---------- components: Library (Lib) messages: 324301 nosy: benjamin.peterson priority: normal severity: normal status: open title: shutil._call_external_zip should use subprocess versions: Python 2.7 _______________________________________ Python tracker <rep...@bugs.python.org> <https://bugs.python.org/issue34540> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
