Added item about the webbrowser security fix.

36736127 · Fred Drake · f706b1c8 · 36736127
Commit 36736127 authored Jan 10, 2002 by Fred Drake
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

Misc/NEWS Misc/NEWS +4 -0

No files found.
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -22,6 +22,10 @@ Library
  "anonymous@" as default password, rather than the real user and host
  name.

+- webbrowser: tightened up the command passed to os.system() so that
+  arbitrary shell code can't be executed because a bogus URL was
+  passed in.
+
 Tools/Demos

 Build