New submission from Benjamin Peterson <[email protected]>:
disutils.spawn isn't very good at quoting command lines (#8987). We need to use subprocess to avoid shell injection. ---------- components: Library (Lib) messages: 324301 nosy: benjamin.peterson priority: normal severity: normal status: open title: shutil._call_external_zip should use subprocess versions: Python 2.7 _______________________________________ Python tracker <[email protected]> <https://bugs.python.org/issue34540> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
