Martijn Pieters <m...@python.org> added the comment:

I found this issue after helping someone solve a Stack Overflow question at 
https://stackoverflow.com/q/58767241/100297; they eventually figured out that 
their prefix was a path, not a path element.

I'd be all in favour of making tempfile._sanitize_params either reject a prefix 
or suffix with `os.sep` or `os.altsep` characters, or just take the last 
element of os.path.split().

----------
nosy: +mjpieters

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue35278>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to