[New-bugs-announce] [issue9723] pipes.quote() needs to be documented
Brandon Craig Rhodes
report at bugs.python.org
Tue Aug 31 15:40:14 CEST 2010
New submission from Brandon Craig Rhodes <brandon at rhodesmill.org>:
The only way to safely build shell command lines from inside of Python — which is necessary when sending commands across SSH, since that behaves like os.system() rather than like subprocess.call() — is to use the wonderful pipes.call() method to turn possibly-dangerous arguments, like filenames that might have spaces, special characters, and embedded "rm -r" calls, into perfectly quoted strings for an "sh"-like shell (say, bash or zsh).
This call is already recommended on mailing lists, blog posts, and Stack Overflow — and since it doesn't start with a "_", I think its public use is fair game. But the "pipes" documentation itself doesn't officially mention or support it. I think it should be added to the Standard Library documentation for "pipes". So. Yeah.
----------
assignee: docs at python
components: Documentation
messages: 115263
nosy: brandon-rhodes, docs at python
priority: normal
severity: normal
status: open
title: pipes.quote() needs to be documented
type: feature request
versions: Python 2.5, Python 2.6, Python 2.7, Python 3.1, Python 3.2, Python 3.3
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue9723>
_______________________________________
More information about the New-bugs-announce
mailing list