[Python-Dev] Impact of Namedtuple on startup time

Steven D'Aprano steve at pearwood.info
Mon Jul 17 20:21:45 EDT 2017


On Mon, Jul 17, 2017 at 09:31:20PM +0000, Brett Cannon wrote:

> As for removing exec() as a goal, I'll back up Christian's point and the
> one Steve made at the language summit that removing the use of exec() from
> the critical path in Python is a laudable goal from a security perspective.

I'm sorry, I don't understand this point. What do you mean by "critical 
path"?

Is the intention to remove exec from builtins? From the entire language? 
If not, how does its use in namedtuple introduce a security problem?



-- 
Steve


More information about the Python-Dev mailing list