#30234: Disallow non-upper settings
----------------------------------------+--------------------------
               Reporter:  orlnub123     |          Owner:  nobody
                   Type:  Bug           |         Status:  new
              Component:  Core (Other)  |        Version:  master
               Severity:  Normal        |       Keywords:  settings
           Triage Stage:  Unreviewed    |      Has patch:  1
    Needs documentation:  0             |    Needs tests:  0
Patch needs improvement:  0             |  Easy pickings:  0
                  UI/UX:  0             |
----------------------------------------+--------------------------
 Contradictory to the documentation, `settings.configure()` and
 `UserSettingsHolder.__getattr__()` allow non-upper settings to be set and
 retrieved, respectively. This allows for the following to happen:
 {{{
 import types
 from django.conf import settings

 settings.configure(types.SimpleNamespace(foo="bar"), baz="qux")
 print(settings.foo, settings.baz)  # Doesn't error
 }}}

-- 
Ticket URL: <https://code.djangoproject.com/ticket/30234>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/052.bb646e054bd593ec505c9af2369647d2%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to