Allow selected os.path members.

161e5c9c · Vincent Pelletier · e1e0c2c2 · 161e5c9c
Commit 161e5c9c authored Jul 26, 2011 by Vincent Pelletier
Show whitespace changes
Inline Side-by-side

Showing with 8 additions and 0 deletions

product/ERP5Type/patches/Restricted.py product/ERP5Type/patches/Restricted.py +8 -0

No files found.
--- a/product/ERP5Type/patches/Restricted.py
+++ b/product/ERP5Type/patches/Restricted.py
@@ -178,3 +178,11 @@ allow_module('difflib')
 allow_module('hashlib')
 allow_module('time')
 allow_module('urlparse')
+
+ModuleSecurityInfo('os.path').declarePublic(
+# Allow functions accessing neither file system nor environment.
+  'abspath', 'basename', 'commonprefix', 'dirname', 'isabs', 'join',
+  'normpath', 'split', 'splitext',
+# Also allow some handy data properties.
+  'sep', 'pardir', 'curdir', 'extsep',
+)