mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-11-07 11:48:19 +02:00
While nothing explicitly prompted updating this, letting `pip` and `pip-tools` diverage too greatly in version release dates seems like a bad idea, especially with the various deprecations in `pip` and `python3.12`. This also vendors the implicit dependencies `build`, `tomli`, and `pyproject_hooks`. Differential Revision: https://phabricator.services.mozilla.com/D210526
19 lines
578 B
Python
19 lines
578 B
Python
# WARNING! BE CAREFUL UPDATING THIS FILE
|
|
# Consider possible security implications associated with subprocess module.
|
|
from __future__ import annotations
|
|
|
|
import subprocess # nosec
|
|
|
|
|
|
def run_python_snippet(python_executable: str, code_to_run: str) -> str:
|
|
"""
|
|
Executes python code by calling python_executable with '-c' option.
|
|
"""
|
|
py_exec_cmd = python_executable, "-c", code_to_run
|
|
|
|
# subprocess module should never be used with untrusted input
|
|
return subprocess.check_output( # nosec
|
|
py_exec_cmd,
|
|
shell=False,
|
|
text=True,
|
|
)
|