[Csv] Re: [Python-Dev] Patch to remove eval from csv sniffer
Andrew McNamara
andrewm at object-craft.com.au
Thu Jun 12 15:41:58 CEST 2003
>> The patch by Raymond Hettinger mentioned here:
>>
>> www.python.org/sf/744104
>>
>> makes a lot of sense. The question is - should it be applied now? We're
>> in the 55th minute of the 11th hour for 2.3, and changes are generally
>> unwelcome. This change changes the sniffer's behaviour slightly, but
>> it's probably better to do this now, than after 2.3 is released (and
>> it's a potential security problem).
Guido said:
>Better now.
Raymond has commited it. Ta.
--
Andrew McNamara, Senior Developer, Object Craft
http://www.object-craft.com.au/
More information about the Csv
mailing list