From: Fred Drake <fdrake@acm.org>
Date: Thu, 10 Jan 2002 13:50:31 +0000 (+0000)
Subject: Added item about the webbrowser security fix.
X-Git-Tag: v2.3c1~6864
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3673612754ce83e27a061f0c5200c2acf522680e;p=thirdparty%2FPython%2Fcpython.git

Added item about the webbrowser security fix.
---

diff --git a/Misc/NEWS b/Misc/NEWS
index 4429f8e04ad8..fd552ed4af59 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -22,6 +22,10 @@ Library
   "anonymous@" as default password, rather than the real user and host
   name.
 
+- webbrowser: tightened up the command passed to os.system() so that
+  arbitrary shell code can't be executed because a bogus URL was
+  passed in.
+
 Tools/Demos
 
 Build