News for hackers. Stuff that matters.

A comment on Remote Code Execution Vulnerability in Google They Are Not Willing to Fix. Parent comment

Re:Remote Code Execution Vulnerability in Google They Are No... by Triesault on Saturday April 15, 2023 @10:37PM (#35586741)
> due to `pip install --extra-index-url` apparently ignoring the user-specified registry if the package exists on PyPI

I thought this was the expected behavior of --extra-index-url

To force pip to use a user-specified registry, you would use --index-url instead of --extra-index-url

[ Parent | on HN ]

There are no comments on this comment yet.