From 935586845815f5b4c7814794413f6a812d4bd45f Mon Sep 17 00:00:00 2001 From: Serhiy Storchaka Date: Sat, 20 Jun 2020 11:10:31 +0300 Subject: bpo-41043: Escape literal part of the path for glob(). (GH-20994) --- Lib/webbrowser.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'Lib/webbrowser.py') diff --git a/Lib/webbrowser.py b/Lib/webbrowser.py index 3dcf66b659..31e1df4247 100755 --- a/Lib/webbrowser.py +++ b/Lib/webbrowser.py @@ -413,7 +413,7 @@ class Grail(BaseBrowser): tempdir = os.path.join(tempfile.gettempdir(), ".grail-unix") user = pwd.getpwuid(os.getuid())[0] - filename = os.path.join(tempdir, user + "-*") + filename = os.path.join(glob.escape(tempdir), glob.escape(user) + "-*") maybes = glob.glob(filename) if not maybes: return None -- cgit v1.2.1