diff --git a/src/bigbrother/ministry/ofexec.py b/src/bigbrother/ministry/ofexec.py index a9cbcccd..51b1b857 100644 --- a/src/bigbrother/ministry/ofexec.py +++ b/src/bigbrother/ministry/ofexec.py @@ -45,9 +45,11 @@ def block_exec(event, info): """Prevent arbitrary code execution in eval/exec and log it.""" # because libraries have stupid amounts of compile/exec/eval, # We have to use a whitelist where it can be tolerated + # Generally better than nothing, not a silver bullet whitelisted_code = [ 'netrc.py', 'shlex.py', + 'gzip.py', '', 'werkzeug/test.py', 'multiprocessing/popen_fork.py', diff --git a/src/onionrcommands/sitecreator.py b/src/onionrcommands/sitecreator.py index b743aaae..b0d14ed0 100644 --- a/src/onionrcommands/sitecreator.py +++ b/src/onionrcommands/sitecreator.py @@ -40,7 +40,7 @@ If you want to update your site later you must remember the passphrase.''', passphrase = getpass.getpass( 'Please enter a site passphrase of at least ' + - onionrvalues.PASSWORD_LENGTH + ' characters.') + str(onionrvalues.PASSWORD_LENGTH) + ' characters.') confirm = getpass.getpass('Confirm passphrase:') if passphrase != confirm: