Commit 5b995163 authored by Jérome Perrin's avatar Jérome Perrin

patches/Restricted: properly support StringIO

Our patch was wrong, it caused guarded_getattr to always allow
attributes of not protected instances of old-style classes. While this
look like a severe security hole, I don't we are using any sensitive non
protected instances

Because cStringIO.StringIO("initial value") makes a read-only StringIO
using another type, this was not supported.
parent 900a9c1c
Pipeline #8772 passed with stage
in 0 seconds