SIGN IN SIGN UP
python / cpython UNCLAIMED

The Python programming language

0 0 2 Python

gh-137586: Open external osascript program with absolute path (GH-137584)

Open web browser with absolute path

On macOS, web browsers are opened via popen calling osascript. However,
if a user has a colliding osascript executable earlier in their PATH,
this may fail or cause unwanted behaviour.

Depending on one's environment or level of paranoia, this may be considered a security vulnerability.

Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
F
Fionn committed
a0c57a8d17eb0f5c4e620d83a13a47cf4d85e76f
Parent: 3d724dd
Committed by GitHub <noreply@github.com> on 4/6/2026, 4:42:10 PM