Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Python: Bugs

[issue13734] Add a generic directory walker method to avoid symlink attacks

 

 

Python bugs RSS feed   Index | Next | Previous | View Threaded


report at bugs

May 10, 2012, 2:20 PM

Post #1 of 3 (137 views)
Permalink
[issue13734] Add a generic directory walker method to avoid symlink attacks

Benjamin Peterson <benjamin [at] python> added the comment:

It would be nice if the documentation of fwalk() explained why you would want to use it over walk().

----------
nosy: +benjamin.peterson

_______________________________________
Python tracker <report [at] bugs>
<http://bugs.python.org/issue13734>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/list-python-bugs%40lists.gossamer-threads.com


report at bugs

May 12, 2012, 8:06 AM

Post #2 of 3 (116 views)
Permalink
[issue13734] Add a generic directory walker method to avoid symlink attacks [In reply to]

Charles-François Natali <neologix [at] free> added the comment:

> It would be nice if the documentation of fwalk() explained why you would
> want to use it over walk().

How does the attached patch look?

----------
Added file: http://bugs.python.org/file25550/fwalk-doc.diff

_______________________________________
Python tracker <report [at] bugs>
<http://bugs.python.org/issue13734>
_______________________________________
Attachments: fwalk-doc.diff (0.47 KB)


report at bugs

May 12, 2012, 12:52 PM

Post #3 of 3 (116 views)
Permalink
[issue13734] Add a generic directory walker method to avoid symlink attacks [In reply to]

Benjamin Peterson <benjamin [at] python> added the comment:

2012/5/12 Charles-François Natali <report [at] bugs>:
>
> Charles-François Natali <neologix [at] free> added the comment:
>
>> It would be nice if the documentation of fwalk() explained why you would
>> want to use it over walk().
>
> How does the attached patch look?

Okay, but explain what a "symlink attack" is.

----------

_______________________________________
Python tracker <report [at] bugs>
<http://bugs.python.org/issue13734>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/list-python-bugs%40lists.gossamer-threads.com

Python bugs RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.