> None of the characters should be
> non-ASCII.  Are you thinking that some user is going to set
> the TMPDIR, TEMP or TMP environment variables to some
> Unicode directory?  That's the only way I think Unicode
> could leak in.

The TEMP env var will, by default, include the username in the full path
(eg, "\Documents and Settings\{username}\Local Settings\...") - hence, a
username with extended chars is relevant.

On the good side though, accessing these variables through os.environ()
should be fine.  In most cases, the 'short name' will be stored in the
environment (meaning they will never be non-ascii), or it will include an
'mbcs' encoded value of the name, which can be passed directly to system
functions without decoding.

So in general, I think you will be alright.

Cheers,

Mark

_______________________________________________
spambayes-dev mailing list
spambayes-dev@python.org
http://mail.python.org/mailman/listinfo/spambayes-dev

Reply via email to