[Django] #12102: Relative PYTHONPATH in the docs

0 views
Skip to first unread message

Django

unread,
Oct 27, 2009, 3:36:42 PM10/27/09
to djang...@holovaty.com, django-...@googlegroups.com
#12102: Relative PYTHONPATH in the docs
---------------------------+------------------------------------------------
Reporter: alexkon | Owner: jacob
Status: new | Milestone: 1.2
Component: Documentation | Version: 1.1
Keywords: | Stage: Unreviewed
Has_patch: 0 |
---------------------------+------------------------------------------------
In at least [http://docs.djangoproject.com/en/dev/internals/contributing
/#running-the-unit-tests one place] in the documentation you explicitly
recommend setting the `PYTHONPATH` environment variable to a relative
path:

{{{
PYTHONPATH=..
./runtests.py --settings=settings generic_relations i18n
}}}

There is an obvious security risk associated with relative paths.

Suggestions:

1. Change the above line to something like {{{PYTHONPATH=`pwd`/..}}}

2. Add a warning everywhere in the docs where you mention setting the
`PYTHONPATH` variable that for security reasons it must contain absolute
paths only.

--
Ticket URL: <http://code.djangoproject.com/ticket/12102>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,
Dec 14, 2009, 4:12:48 PM12/14/09
to djang...@holovaty.com, django-...@googlegroups.com
#12102: Relative PYTHONPATH in the docs
------------------------------------+---------------------------------------
Reporter: alexkon | Owner:
Status: new | Milestone: 1.2
Component: Documentation | Version: 1.1
Resolution: | Keywords:
Stage: Unreviewed | Has_patch: 0
Needs_docs: 0 | Needs_tests: 0
Needs_better_patch: 0 |
------------------------------------+---------------------------------------
Changes (by jacob):

* owner: jacob =>
* needs_better_patch: => 0
* needs_tests: => 0
* needs_docs: => 0

--
Ticket URL: <http://code.djangoproject.com/ticket/12102#comment:1>

Django

unread,
Dec 15, 2009, 11:10:47 AM12/15/09
to djang...@holovaty.com, django-...@googlegroups.com
#12102: Relative PYTHONPATH in the docs
------------------------------------+---------------------------------------
Reporter: alexkon | Owner:
Status: new | Milestone: 1.2
Component: Documentation | Version: 1.1
Resolution: | Keywords:
Stage: Accepted | Has_patch: 0
Needs_docs: 0 | Needs_tests: 0
Needs_better_patch: 0 |
------------------------------------+---------------------------------------
Changes (by jcd):

* stage: Unreviewed => Accepted

--
Ticket URL: <http://code.djangoproject.com/ticket/12102#comment:2>

Django

unread,
Jan 14, 2010, 10:06:34 PM1/14/10
to djang...@holovaty.com, django-...@googlegroups.com
#12102: Relative PYTHONPATH in the docs
------------------------------------+---------------------------------------
Reporter: alexkon | Owner:
Status: new | Milestone: 1.2
Component: Documentation | Version: 1.1
Resolution: | Keywords:
Stage: Accepted | Has_patch: 1
Needs_docs: 0 | Needs_tests: 0
Needs_better_patch: 0 |
------------------------------------+---------------------------------------
Changes (by arnav):

* has_patch: 0 => 1

Comment:

Patch added.

--
Ticket URL: <http://code.djangoproject.com/ticket/12102#comment:3>
Reply all
Reply to author
Forward
0 new messages