Timeline for Does blocking keywords prevent code injection inside this interactive Python file?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 19, 2021 at 9:06 | history | edited | KlausF | CC BY-SA 4.0 |
edited body
|
| Mar 19, 2021 at 9:00 | history | edited | KlausF | CC BY-SA 4.0 |
take into account @user236968's feedback
|
| Mar 19, 2021 at 6:35 | comment | added | KlausF | OK. so as soon as one object is exported all is lost. | |
| Mar 18, 2021 at 22:26 | comment | added | user236968 |
You can still get the builtins yourstring = "myfunc.__globals__['__builtins__'].print('Escaped')"
|
|
| Mar 18, 2021 at 20:05 | history | edited | KlausF | CC BY-SA 4.0 |
disclaimer + spelling
|
| Mar 18, 2021 at 19:59 | history | edited | KlausF | CC BY-SA 4.0 |
disclaimer + spelling
|
| Mar 18, 2021 at 19:57 | review | First posts | |||
| Mar 19, 2021 at 2:33 | |||||
| Mar 18, 2021 at 19:54 | history | answered | KlausF | CC BY-SA 4.0 |