On Sat, Feb 4, 2017 at 3:19 PM, Wildman via Python-list <python-list@python.org> wrote: > > Personally I don't understand the danger in having the dot in the path. The > './' only > means the current directory. DOS and Windows has searched the current > directory > since their beginning. Is that also dangerous?
On Windows Vista and later this can be disabled by defining the environment variable NoDefaultCurrentDirectoryInExePath. This affects cmd.exe and CreateProcess, and any program that calls NeedCurrentDirectoryForExePath [1]. However, it doesn't override setting "." in PATH, a practice that should be avoided anyway. [1]: https://msdn.microsoft.com/en-us/library/ms684269 -- https://mail.python.org/mailman/listinfo/python-list
