Skip to content

Document that importlib.resources has the same security model as open() #148337

@sethmlarson

Description

@sethmlarson

Documentation

Users are expected to control the inputs to these APIs. Adding a sentence about this, optionally in a warning, should be enough to document the threat model.

Linked PRs

Metadata

Metadata

Assignees

No one assigned

    Projects

    Status

    Todo

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions