On 12/14/05, Ian Holsman <[EMAIL PROTECTED]> wrote:
> my other concern with putting the python path into the URL is would it
> allow nasty thing
> like
> admin/init.me.and.i.format.your.hard_disk/
> ?
> and other weird easter eggs which a unsuspecting admin doesn't realize
> is on his machine?

Clearly we would want to avoid that. Before importing, it could check
that the module is in INSTALLED_APPS.

Adrian

--
Adrian Holovaty
holovaty.com | djangoproject.com | chicagocrime.org

Reply via email to