File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -32,8 +32,3 @@ The following modules have specific security considerations:
3232* :mod: `zipfile `: :ref: `maliciously prepared .zip files can cause disk volume
3333 exhaustion <zipfile-resources-limitations>`
3434
35- The :option: `-I ` command line option can be used to run Python in isolated
36- mode. When it cannot be used, the :option: `-P ` option or the
37- :envvar: `PYTHONSAFEPATH ` environment variable can be used to not prepend a
38- potentially unsafe path to :data: `sys.path ` such as the current directory, the
39- script's directory or an empty string.
Original file line number Diff line number Diff line change @@ -294,8 +294,11 @@ Miscellaneous options
294294
295295.. option :: -E
296296
297- Ignore all ``PYTHON* `` environment variables, e.g.
297+ Ignore all ``PYTHON* `` environment variables, for example,
298298 :envvar: `PYTHONPATH ` and :envvar: `PYTHONHOME `, that might be set.
299+ This is useful for running commands that should not take into account the
300+ user's current environment settings, but does not necessarily mean that the
301+ current environment will have no effect.
299302
300303 See also the :option: `-P ` and :option: `-I ` (isolated) options.
301304
@@ -363,6 +366,8 @@ Miscellaneous options
363366 * ``python -c code `` and ``python `` (REPL) command lines: Don't prepend an
364367 empty string, which means the current working directory.
365368
369+ This feature is not a security boundary. Further restrictions need to be
370+ imposed to prevent the user from injecting malicious code.
366371 See also the :envvar: `PYTHONSAFEPATH ` environment variable, and :option: `-E `
367372 and :option: `-I ` (isolated) options.
368373
You can’t perform that action at this time.
0 commit comments