[Csv] Re: [Python-Dev] Patch to remove eval from csv sniffer

Andrew McNamara andrewm at object-craft.com.au
Thu Jun 12 15:41:58 CEST 2003


>> The patch by Raymond Hettinger mentioned here:
>> 
>>     www.python.org/sf/744104
>> 
>> makes a lot of sense. The question is - should it be applied now? We're
>> in the 55th minute of the 11th hour for 2.3, and changes are generally
>> unwelcome. This change changes the sniffer's behaviour slightly, but
>> it's probably better to do this now, than after 2.3 is released (and
>> it's a potential security problem).

Guido said:
>Better now.

Raymond has commited it. Ta.

-- 
Andrew McNamara, Senior Developer, Object Craft
http://www.object-craft.com.au/


More information about the Csv mailing list