]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-124651: Quote template strings in `venv` activation scripts (GH-124712)
authorY5 <124019959+y5c4l3@users.noreply.github.com>
Mon, 21 Oct 2024 20:48:04 +0000 (04:48 +0800)
committerGitHub <noreply@github.com>
Mon, 21 Oct 2024 20:48:04 +0000 (21:48 +0100)
commitd48cc82ed25e26b02eb97c6263d95dcaa1e9111b
treee76ebd6c4a8898e0cd73e51623821bd7d443e120
parent44f841f01af0fb038e142a07f15eda1ecdd5b08a
gh-124651: Quote template strings in `venv` activation scripts (GH-124712)

This patch properly quotes template strings in `venv` activation
scripts. This mitigates potential command injection.
Lib/test/test_venv.py
Lib/venv/__init__.py
Lib/venv/scripts/common/activate
Lib/venv/scripts/common/activate.fish
Lib/venv/scripts/nt/activate.bat
Lib/venv/scripts/posix/activate.csh
Misc/NEWS.d/next/Library/2024-09-28-02-03-04.gh-issue-124651.bLBGtH.rst [new file with mode: 0644]