gecko-dev/python
Gregory Szorc 6e4366049c Bug 1469999 - Use yaml.safe_load() for loading linter config file; r=ahal
yaml.load() is unsafe and can lead to arbitrary code execution via
syntax like `!!python/object/apply:os.system`. yaml.safe_load() is
more reasonable.

Differential Revision: https://phabricator.services.mozilla.com/D1738

--HG--
extra : rebase_source : 597c07b3c1538dc27ad6f46e01cdb7f48755d0bc
extra : histedit_source : 131d570f8ac1ee047487cba54822dbf20abf6681
2018-06-20 14:29:27 -07:00
..
devtools/migrate-l10n Bug 1346025 - Move vendored python modules from /python to /third_party/python, r=ted 2017-05-25 11:48:03 -04:00
docs Backed out 3 changesets (bug 1346026) for Bugzilla linting 2018-05-23 19:42:13 +03:00
l10n/fluent_migrations Bug 1464029 - Remove Fluent migration recipes for Firefox 60 and older r=Pike 2018-05-30 08:46:18 +02:00
mach Backed out 3 changesets (bug 1388013) for build bustages e.g. ../python/mozbuild/mozpack/test/test_files.py on a CLOSED TREE 2018-05-31 11:48:19 +03:00
mozboot Bug 1462444 - Make |mach bootstrap| use the latest version of Oracle's JDK when bootstrapping Fennec on Gentoo; r=nalexander 2018-05-17 21:44:26 +02:00
mozbuild Bug 1469999 - Use yaml.safe_load() for loading clang-tidy config file; r=chmanchester 2018-06-20 14:29:06 -07:00
mozlint Bug 1469999 - Use yaml.safe_load() for loading linter config file; r=ahal 2018-06-20 14:29:27 -07:00
mozrelease Bug 1453274 - Bump mozrelease in tree version, to distinguish it from the pypi mirror version. r=rail 2018-04-24 21:55:22 -04:00
mozterm Bug 1428362 - Add Python 3 support to mozterm; r=ahal 2018-05-30 13:51:30 +01:00
mozversioncontrol Backed out 3 changesets (bug 1388013) for build bustages e.g. ../python/mozbuild/mozpack/test/test_files.py on a CLOSED TREE 2018-05-31 11:48:19 +03:00
mach_commands.py Bug 1466211 - Use --python for selecting target Python when using |mach python-test|; r=ahal 2018-06-13 14:18:21 -07:00
moz.build Bug 1469872 - update bugzilla products and components in moz.build files: devtools. r=nalexander 2018-06-20 21:34:40 +03:00
README Bug 1346025 - Move vendored python modules from /python to /third_party/python, r=ted 2017-05-25 11:48:03 -04:00

This directory contains common Python code.

The basic rule is that if Python code is cross-module (that's "module" in the
Mozilla meaning - as in "module ownership") and is MPL-compatible, it should
go here.

What should not go here:

* Vendored python modules (use third_party/python instead)
* Python that is not MPL-compatible (see other-licenses/)
* Python that has good reason to remain close to its "owning" (Mozilla)
  module (e.g. it is only being consumed from there).

Historical information can be found at
https://bugzilla.mozilla.org/show_bug.cgi?id=775243
https://bugzilla.mozilla.org/show_bug.cgi?id=1346025