Steve Dower <steve.do...@python.org> added the comment:

> I hadn't realized that we'd made such a declaration WRT opening of code files 
> in general.

It wasn't exactly a hugely publicised declaration :)

The relevant quote from PEP 578 is:

> All import and execution functionality involving code from a file will be 
> changed to use open_code() unconditionally.

Which I admit is a big claim, and one that was not completely followed through 
with before 3.8.0. Calling it a "security" fix is borderline, as it isn't 
really a vulnerability by default, but calling it incorrect behaviour (i.e. a 
regular bug) is fine by me.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue38722>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to