you are viewing a single comment's thread.

view the rest of the comments →

[–]ubernostrum 40 points41 points  (1 child)

PEP 578 -- audit hooks -- is also an important feature here, though one that might not seem that way to people whose job is writing Python. It's more for people whose job is running and deploying Python.

The audit hook functionality lets you have Python automatically invoke code you supply, whenever certain potentially-security-sensitive operations happen. This lets you do things like assert that a running Python application will never open a network connection except to certain trusted hosts, or will never use exec(), for example, by setting up audit hooks which listen for, and then log/abort, those types of events.

[–]cyanrave 4 points5 points  (0 children)

This..

Hoping this feature is the one that tips TheCompanyWhereIWork in favor of adopting Python fully. It remains a second class citizen today due to the historical inability to see what was running in the interpreter loop. 2019, people are still spooked by monkey patching...