diff options
| author | Jason R. Coombs <jaraco@jaraco.com> | 2019-01-27 13:13:57 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-01-27 13:13:57 -0500 |
| commit | 0425790c7d2d60ebd0e576796d07288a43fcaf0c (patch) | |
| tree | 41c3e4caeb4d3e452bbadcf771a3056ab9f561c1 /docs | |
| parent | 97e8ad4f5ff7793729e9c8be38e0901e3ad8d09e (diff) | |
| parent | 6636302f735d94fe91b83469f1610e4112a91838 (diff) | |
| download | external_python_setuptools-0425790c7d2d60ebd0e576796d07288a43fcaf0c.tar.gz external_python_setuptools-0425790c7d2d60ebd0e576796d07288a43fcaf0c.tar.bz2 external_python_setuptools-0425790c7d2d60ebd0e576796d07288a43fcaf0c.zip | |
Merge pull request #1640 from pypa/bugfix/1635-disallow-parent-paths
Disallow parent path traversal in resource paths, part 1 (deprecation)
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/pkg_resources.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/pkg_resources.txt b/docs/pkg_resources.txt index 0c9fb5f2..806f1b14 100644 --- a/docs/pkg_resources.txt +++ b/docs/pkg_resources.txt @@ -1132,8 +1132,8 @@ relative to the root of the identified distribution; i.e. its first path segment will be treated as a peer of the top-level modules or packages in the distribution. -Note that resource names must be ``/``-separated paths and cannot be absolute -(i.e. no leading ``/``) or contain relative names like ``".."``. Do *not* use +Note that resource names must be ``/``-separated paths rooted at the package, +cannot contain relative names like ``".."``, and cannot be absolute. Do *not* use ``os.path`` routines to manipulate resource paths, as they are *not* filesystem paths. |