New submission from Christian Heimes <li...@cheimes.de>:

On two occasions, the xml package uses environment variables to override parser 
/ DOM implementations: xml.sax package and xml.dom.domreg module. On both 
occasions, the code should not use env vars to override module names, when the 
interpreter is started with flags like -E or -I.

----------
components: XML
messages: 326267
nosy: christian.heimes
priority: normal
severity: normal
status: open
title: xml package does not obey sys.flags.ignore_environment
type: security
versions: Python 2.7, Python 3.6, Python 3.7, Python 3.8

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue34791>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to