[Python-Dev] Security implications of pep 383 (original) (raw)

Antoine Pitrou solipsis at pitrou.net
Tue Mar 29 22:56:27 CEST 2011


On Tue, 29 Mar 2011 22:40:01 +0200 Lennart Regebro <regebro at gmail.com> wrote:

The lesson here seems to be "if you have to use blacklists, and you use unicode strings for those blacklists, also make sure the string you compare with doesn't have surrogates".

Not really. As everyone said, this can happen even without surrogates.

Regards

Antoine.



More information about the Python-Dev mailing list