Eric V. Smith added the comment:

I agree with Bryan. Further, if the string is being interpreted as Tcl, then 
this strikes me as a possible injection attack vector (although I'll admit to 
not having looked at the code to see how the Tcl code is being used and/or 
interpreted).

----------
nosy: +eric.smith

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue15861>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to