3 ms·
The way python's run time literally executes code when you import a module makes it seem pretty easy to taint things from afar. You only need to control a singl
by zmmmmm 3y ago
The way python's run time literally executes code when you import a module makes it seem pretty easy to taint things from afar. You only need to control a single import anywhere in the dependency hierarchy and you can reach over and override any code somewhere else.
- sunshowers 3y agoOh yeah, that's a fantastic point.
- eru 3y agoThere are lints that will warn you, if your imported module does anything apart from define functions and classes. (Though not sure how fool-proof these are.)