diff options
| author |   Raymond Hettinger <rhettinger@users.noreply.github.com> | 2020-06-07 23:51:40 -0700 |
|---|---|---|
| committer |   GitHub <noreply@github.com> | 2020-06-07 23:51:40 -0700 |
| commit | 3ff51d425ecd98b7ba5a12ca9f77eda73fbf9f53 (patch) | |
| tree | 507694fcd5f3dc2538c2327c1692ad9dd22b1249 /Lib/collections | |
| parent | bpo-22021: Update root_dir and base_dir documentation in shutil (GH-10367) (diff) | |
| download | cpython-3ff51d425ecd98b7ba5a12ca9f77eda73fbf9f53.tar.gz cpython-3ff51d425ecd98b7ba5a12ca9f77eda73fbf9f53.tar.bz2 cpython-3ff51d425ecd98b7ba5a12ca9f77eda73fbf9f53.zip | |
Deny eval() direct access to builtins (GH-20713)
Diffstat (limited to 'Lib/collections')
| -rw-r--r-- | Lib/collections/__init__.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/Lib/collections/__init__.py b/Lib/collections/__init__.py index 03393f35b11..1e3b54ccf9c 100644 --- a/Lib/collections/__init__.py +++ b/Lib/collections/__init__.py @@ -407,7 +407,8 @@ def namedtuple(typename, field_names, *, rename=False, defaults=None, module=Non # Create all the named tuple methods to be added to the class namespace s = f'lambda _cls, {arg_list}: _tuple_new(_cls, ({arg_list}))' - namespace = {'_tuple_new': tuple_new, '__name__': f'namedtuple_{typename}'} + namespace = {'_tuple_new': tuple_new, '__builtins__': None, + '__name__': f'namedtuple_{typename}'} __new__ = eval(s, namespace) __new__.__doc__ = f'Create new instance of {typename}({arg_list})' if defaults is not None: |