[Python-Dev] Python-3.0, unicode, and os.environ

Stephen J. Turnbull stephen at xemacs.org
Mon Dec 8 05:13:38 CET 2008


Glenn Linderman writes:

 > But if you are interested in checking for security issues, shouldn't you 
 >   _first_ decode into some canonical form,

Yes.  That's all that is being asked for: that Python do strict
decoding to a canonical form by default.  That's a lot to ask, as it
turns out, but that is what we (the minority of strict Unicode
adherents, that is) want.

If you want the convenience and risk, I believe you should ask for it
by name (I suggest a name like "own_me" for the relaxed decoding
flag<wink>).  Failing that, it would be nice to have a global flag to
change the default.



More information about the Python-Dev mailing list