• Guido van Rossum's avatar
    Since this module is used as a fallback in case no built-in modules · 90d62ab0
    Guido van Rossum yazdı
    have been configured, string.atof() should not fail when "import re"
    fails (usually because pcre is not there).
    
    This opens up a tiny security hole: *if* an attacker can make "import
    re" fail, they can also make string.atof(arbitrary_string) evaluate
    the arbitrary string.  Nothing to keep me awake at night...
    90d62ab0
stringold.py 8.77 KB