On Sat, Sep 5, 2015 at 5:11 AM, Nick Coghlan wrote:
> On 5 September 2015 at 13:04, Guido van Rossum wrote:
> > I think it's too much effort for too little gain.
> >
> > The motivation feels very weak; surely writing
> >
> > os.system("echo " + message_from_user)
> >
> > is just as easy (as is
On 5 September 2015 at 13:04, Guido van Rossum wrote:
> I think it's too much effort for too little gain.
>
> The motivation feels very weak; surely writing
>
> os.system("echo " + message_from_user)
>
> is just as easy (as is the %s spelling), so the security issue can hardly be
> blamed on PEP
I think it's too much effort for too little gain.
The motivation feels very weak; surely writing
os.system("echo " + message_from_user)
is just as easy (as is the %s spelling), so the security issue can hardly
be blamed on PEP 498.
I also don't think that the current way to address such secur