Author brett.cannon
Recipients Antony.Lee, WGH, brett.cannon
Date 2016-04-12.17:40:12
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <>
This can't change in Python 2.7 because of backwards-compatibility. And I would argue this isn't a serious security risk as pkgutil.get_data() typically works with string constants and values provided by the library and not user-provided values. This is basically the same as taking a value for open() and has the same risks.
Date User Action Args
2016-04-12 17:40:12brett.cannonsetrecipients: + brett.cannon, Antony.Lee, WGH
2016-04-12 17:40:12brett.cannonsetmessageid: <>
2016-04-12 17:40:12brett.cannonlinkissue25330 messages
2016-04-12 17:40:12brett.cannoncreate