mirrors/cpython
0
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2024-11-30 05:15:14 +08:00
Code Issues Packages Projects Releases Wiki Activity

evolution

Browse Source
This commit is contained in:
Guido van Rossum 1995-01-17 15:58:37 +00:00
parent 5c83252be4
commit 8e8a525f22
1 changed files with 4 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
Lib/rexec.py
View File

@ -25,7 +25,6 @@ def copymodule(src, dst, exceptions = [], only = None):
safe_path = ['/ufs/guido/lib/python'] safe_path = ['/ufs/guido/lib/python']
safe_modules = ['array', 'math', 'regex', 'strop', 'time'] safe_modules = ['array', 'math', 'regex', 'strop', 'time']
unsafe_builtin_names = ['open', 'reload', '__import__', unsafe_builtin_names = ['open', 'reload', '__import__',
'eval', 'execfile', 'dir', 'vars',
'raw_input', 'input'] 'raw_input', 'input']
safe_posix_names = ['error', 'fstat', 'listdir', 'lstat', 'readlink', 'stat', safe_posix_names = ['error', 'fstat', 'listdir', 'lstat', 'readlink', 'stat',
'times', 'uname', 'getpid', 'getppid', 'getcwd', 'times', 'uname', 'getpid', 'getppid', 'getcwd',
@ -87,24 +86,13 @@ def safe_open(file, mode = 'r'):
raise TypeError, 'open argument(s) must be string(s)' raise TypeError, 'open argument(s) must be string(s)'
if mode not in ('r', 'rb'): if mode not in ('r', 'rb'):
raise IOError, 'open for writing not allowed' raise IOError, 'open for writing not allowed'
if '/' in file: file = os.path.join(os.getcwd(), file)
raise IOError, 'open pathname not allowed' file = os.path.normpath(file)
if file[:2] == '//' or file[:5] == '/etc/' or file[:4] == '/../':
raise IOError, 'this path not allowed for reading'
return open(file, mode) return open(file, mode)
safe_builtin.open = safe_open safe_builtin.open = safe_open
def safe_dir(object = safe_main):
keys = object.__dict__.keys()
keys.sort()
return keys
safe_builtin.dir = safe_dir
def safe_vars(object = safe_main):
keys = safe_dir(object)
dict = {}
copydict(object.__dict__, dict, None, keys)
return dict
safe_builtin.vars = safe_vars
def exterior(): def exterior():
"""Return env of caller's caller, as triple: (name, locals, globals). """Return env of caller's caller, as triple: (name, locals, globals).