[issue14984] netrc module allows read of non-secured .netrc file
R. David Murray
report at bugs.python.org
Sun Sep 15 22:09:25 CEST 2013
R. David Murray added the comment:
Here is an updated patch, with docs and test.
Turns out it actually wasn't necessary to move the check to the password, but I'm leaving it that way anyway. The reason it wasn't necessary is that we don't actually parse the .netrc file correctly: we require that the password field be present. So I'll want to fix *that* bug in some version of python, in which case the test should then be in the password check where I have it now...
----------
Added file: http://bugs.python.org/file31779/netrc-2.6.patch
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14984>
_______________________________________
More information about the Python-bugs-list
mailing list