diff options
| author | Campbell Barton <ideasman42@gmail.com> | 2010-02-28 20:11:42 +0300 |
|---|---|---|
| committer | Campbell Barton <ideasman42@gmail.com> | 2010-02-28 20:11:42 +0300 |
| commit | 0e18035f82b9fa50cd9f788c85e52413f78e5a1a (patch) | |
| tree | 1c89baffdfdccabaeeb2ca9a57ebb45f0ffadd8a /release/scripts/modules/bpy/__init__.py | |
| parent | ed7f4f2e3cc19e6c90b678b87617d2a19ddc3da3 (diff) | |
remove so-called security patch,
this has been used by various projects but needs to be justified since it wont remove paths that also resolve to the CWD, "." for instance.
Diffstat (limited to 'release/scripts/modules/bpy/__init__.py')
| -rw-r--r-- | release/scripts/modules/bpy/__init__.py | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/release/scripts/modules/bpy/__init__.py b/release/scripts/modules/bpy/__init__.py index 4f512613072..12f8e19cef4 100644 --- a/release/scripts/modules/bpy/__init__.py +++ b/release/scripts/modules/bpy/__init__.py @@ -38,8 +38,10 @@ import sys as _sys def _main(): - # security issue, dont allow the $CWD in the path. - _sys.path[:] = filter(None, _sys.path) + ## security issue, dont allow the $CWD in the path. + ## note: this removes "" but not "." which are the same, security + ## people need to explain how this is even a fix. + # _sys.path[:] = filter(None, _sys.path) # a bit nasty but this prevents help() and input() from locking blender # Ideally we could have some way for the console to replace sys.stdin but |