diff options
| author | Campbell Barton <ideasman42@gmail.com> | 2010-02-28 20:11:42 +0300 |
|---|---|---|
| committer | Campbell Barton <ideasman42@gmail.com> | 2010-02-28 20:11:42 +0300 |
| commit | 0e18035f82b9fa50cd9f788c85e52413f78e5a1a (patch) | |
| tree | 1c89baffdfdccabaeeb2ca9a57ebb45f0ffadd8a | |
| parent | ed7f4f2e3cc19e6c90b678b87617d2a19ddc3da3 (diff) | |
remove so-called security patch,
this has been used by various projects but needs to be justified since it wont remove paths that also resolve to the CWD, "." for instance.
| -rw-r--r-- | release/scripts/modules/bpy/__init__.py | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/release/scripts/modules/bpy/__init__.py b/release/scripts/modules/bpy/__init__.py index 4f512613072..12f8e19cef4 100644 --- a/release/scripts/modules/bpy/__init__.py +++ b/release/scripts/modules/bpy/__init__.py @@ -38,8 +38,10 @@ import sys as _sys def _main(): - # security issue, dont allow the $CWD in the path. - _sys.path[:] = filter(None, _sys.path) + ## security issue, dont allow the $CWD in the path. + ## note: this removes "" but not "." which are the same, security + ## people need to explain how this is even a fix. + # _sys.path[:] = filter(None, _sys.path) # a bit nasty but this prevents help() and input() from locking blender # Ideally we could have some way for the console to replace sys.stdin but |