Re: Security considerations around package.{path,cpath}

[Francisco Olarte <folarte@...>]

Sean:

On Fri, 2 Dec 2022 at 23:46, Sean Conner <sean@conman.org> wrote:

>   Also, malicious code could always modify package.path and package.cpath to
> include the current directory.

(Not properly sandboxed) RUNNING malicious code does not have to
resort to these to wreak havoc.

FOS.