Alexander Riccio added the comment:

When I say "I'm really not sure what it'd look like, or how it'd work" I mean 
at the C level. At a higher level, there are many places that I imagine are 
good places to use AMSI: Perhaps expressions passed in from the command line 
(-c) should be scanned; maybe pip packages should be scanned on installation, 
and maybe untrusted packages should be scanned right before execution...

Then it's a matter of calling the AMSI APIs in the right places; I don't know 
where those are.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue26137>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to