From: Fred Drake Date: Thu, 10 Jan 2002 13:50:31 +0000 (+0000) Subject: Added item about the webbrowser security fix. X-Git-Tag: v2.3c1~6864 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=3673612754ce83e27a061f0c5200c2acf522680e;p=python Added item about the webbrowser security fix. --- diff --git a/Misc/NEWS b/Misc/NEWS index 4429f8e04a..fd552ed4af 100644 --- a/Misc/NEWS +++ b/Misc/NEWS @@ -22,6 +22,10 @@ Library "anonymous@" as default password, rather than the real user and host name. +- webbrowser: tightened up the command passed to os.system() so that + arbitrary shell code can't be executed because a bogus URL was + passed in. + Tools/Demos Build