python312Packages.quantities: prevent arbitrary code eval

(cherry picked from commit 131d5e4858)
This commit is contained in:
Robert Schütz
2024-09-07 16:23:11 -07:00
committed by github-actions[bot]
parent e3305673ad
commit 7e888742d2

View File

@@ -2,6 +2,7 @@
lib,
buildPythonPackage,
fetchFromGitHub,
fetchpatch2,
numpy,
pytestCheckHook,
pythonOlder,
@@ -23,6 +24,14 @@ buildPythonPackage rec {
hash = "sha256-N20xfzGtM0VnfkJtzMytNLySTkgVz2xf1nEJxlwBSCI=";
};
patches = [
(fetchpatch2 {
name = "prevent-arbitrary-code-eval.patch";
url = "https://github.com/python-quantities/python-quantities/pull/236.patch";
hash = "sha256-H1tOfXqNMIKY01m6o2PsfZG0CvnWNxW2qIWA5ce1lRk=";
})
];
build-system = [
setuptools
setuptools-scm