GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Backport PR #31282 on branch v3.10.x (SEC: Block shell escapes in latex and ps commands) by ksunden · Pull Request #31542 · matplotlib/matplotlib

Conversation

@ksunden

@ksunden ksunden commented Apr 21, 2026

Copy link
Copy Markdown
Member
  • Backport PR SVG backend - handle font weight as integer #30960: SVG backend - handle font weight as integer
  • Backport PR DOC: Tutorial on API shortcuts #30952: DOC: Tutorial on API shortcuts
  • Backport PR DOC: Simplify barh() example #30969: DOC: Simplify barh() example
  • Backport PR MNT: do not assign a numpy array shape #30985: MNT: do not assign a numpy array shape
  • Backport PR DOCS: Fix typo in time array step size comment #31035: DOCS: Fix typo in time array step size comment
  • Backport PR Fix remove method for figure title and xy-labels #31075: Fix remove method for figure title and xy-labels
  • Backport PR TST: Use correct method of clearing mock objects #31153: TST: Use correct method of clearing mock objects
  • Backport PR Fix clabel manual argument not accepting unit-typed coordinates #31278: Fix clabel manual argument not accepting unit-typed coordinates
  • Backport PR FIX: Prevent crash when removing a subfigure containing subplots #31323: FIX: Prevent crash when removing a subfigure containing subplots
  • Backport PR BLD: Temporarily pin setuptools-scm<10 #31401: BLD: Temporarily pin setuptools-scm<10
  • Backport PR Fix outdated Savannah URL for freetype download #31420: Fix outdated Savannah URL for freetype download
  • Backport PR mathtext: Fix type inconsistency with fontmaps #31437: mathtext: Fix type inconsistency with fontmaps
  • Bump mimimum Ubuntu Version on Azure because 20.04 is EOL
  • Backport PR Re-order variants to prioritize narrower types #31504: Re-order variants to prioritize narrower types
  • Backport PR DOC: Fix doc builds with Sphinx 9 #31020: DOC: Fix doc builds with Sphinx 9
  • Merge pull request SEC: Block shell escapes in latex and ps commands #31282 from scottshambaugh/tex_no_shell

PR summary

PR checklist

  • "closes #0000" is in the body of the PR description to link the related issue
  • new and changed code is tested
  • Plotting related features are demonstrated in an example
  • New Features and API Changes are noted with a directive and release note
  • Documentation complies with general and docstring guidelines

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
steveberardi and others added 30 commits January 14, 2026 17:29
@steveberardi @meeseeksmachine
Backport PR matplotlib#30960: SVG backend - handle font weight as int…
a59d1d2
…eger
@timhoffm
Merge pull request matplotlib#30964 from meeseeksmachine/auto-backpor…
58d5aea
…t-of-pr-30960-on-v3.10.x

Backport PR matplotlib#30960 on branch v3.10.x (SVG backend - handle font weight as integer)
@timhoffm @meeseeksmachine
Backport PR matplotlib#30952: DOC: Tutorial on API shortcuts
bc44318
@timhoffm
Merge pull request matplotlib#30965 from meeseeksmachine/auto-backpor…
521df0b
…t-of-pr-30952-on-v3.10.x

Backport PR matplotlib#30952 on branch v3.10.x (DOC: Tutorial on API shortcuts)
@rcomer @meeseeksmachine
Backport PR matplotlib#30969: DOC: Simplify barh() example
8c7d40f
@rcomer
Merge pull request matplotlib#30971 from meeseeksmachine/auto-backpor…
df313af
…t-of-pr-30969-on-v3.10.x

Backport PR matplotlib#30969 on branch v3.10.x (DOC: Simplify barh() example)
@scottshambaugh @meeseeksmachine
Backport PR matplotlib#30985: MNT: do not assign a numpy array shape
89a35d8
@timhoffm
Merge pull request matplotlib#30986 from meeseeksmachine/auto-backpor…
50d13e4
…t-of-pr-30985-on-v3.10.x

Backport PR matplotlib#30985 on branch v3.10.x (MNT: do not assign a numpy array shape)
@rcomer @meeseeksmachine
Backport PR matplotlib#31035: DOCS: Fix typo in time array step size …
2deb54c
…comment
@rcomer
Merge pull request matplotlib#31036 from meeseeksmachine/auto-backpor…
8db8148
…t-of-pr-31035-on-v3.10.x

Backport PR matplotlib#31035 on branch v3.10.x (DOCS: Fix typo in time array step size comment)
@QuLogic @meeseeksmachine
Backport PR matplotlib#31075: Fix remove method for figure title and …
313a44d
…xy-labels
@ksunden @meeseeksmachine
Backport PR matplotlib#31153: TST: Use correct method of clearing moc…
b9d7e7f
…k objects
@timhoffm
Merge pull request matplotlib#31154 from meeseeksmachine/auto-backpor…
cc7fe5a
…t-of-pr-31153-on-v3.10.x

Backport PR matplotlib#31153 on branch v3.10.x (TST: Use correct method of clearing mock objects)
@aman-coder03 @meeseeksmachine
Backport PR matplotlib#31278: Fix clabel manual argument not accept…
ef19bdc
…ing unit-typed coordinates
@Vikash-Kumar-23 @meeseeksmachine
Backport PR matplotlib#31323: FIX: Prevent crash when removing a subf…
f32af1d
…igure containing subplots
@QuLogic @rcomer
Backport PR matplotlib#31401: BLD: Temporarily pin setuptools-scm<10
6aac3da
BLD: Temporarily pin setuptools-scm<10
(cherry picked from commit 443c728)
@timhoffm
Merge pull request matplotlib#31418 from rcomer/pin-setuptools-scm-ba…
9220b77
…ckport

Backport PR matplotlib#31401: BLD: Temporarily pin setuptools-scm<10
@timhoffm @meeseeksmachine
Backport PR matplotlib#31420: Fix outdated Savannah URL for freetype …
3c91aec
…download
@rcomer
Merge pull request matplotlib#31421 from meeseeksmachine/auto-backpor…
b9163f8
…t-of-pr-31420-on-v3.10.x

Backport PR matplotlib#31420 on branch v3.10.x (Fix outdated Savannah URL for freetype download)
@rcomer
Merge pull request matplotlib#31411 from meeseeksmachine/auto-backpor…
51c85f7
…t-of-pr-31323-on-v3.10.x

Backport PR matplotlib#31323 on branch v3.10.x (FIX: Prevent crash when removing a subfigure containing subplots)
@tacaswell @ksunden
Backport PR matplotlib#31437: mathtext: Fix type inconsistency with f…
69e6954
…ontmaps

mathtext: Fix type inconsistency with fontmaps
(cherry picked from commit fc6aa04)
@ksunden
Bump mimimum Ubuntu Version on Azure because 20.04 is EOL
cada119
@QuLogic
Merge pull request matplotlib#31445 from ksunden/auto-backport-of-pr-…
45ac295
…31437-on-v3.10.x

Backport PR matplotlib#31437: mathtext: Fix type inconsistency with fontmaps
@QuLogic @meeseeksmachine
Backport PR matplotlib#31504: Re-order variants to prioritize narrowe…
614abdd
…r types
@ksunden
Merge pull request matplotlib#31511 from meeseeksmachine/auto-backpor…
6e203dc
…t-of-pr-31504-on-v3.10.x

Backport PR matplotlib#31504 on branch v3.10.x (Re-order variants to prioritize narrower types)
@timhoffm @meeseeksmachine
Backport PR matplotlib#31020: DOC: Fix doc builds with Sphinx 9
2da812c
@ksunden
Merge pull request matplotlib#31520 from meeseeksmachine/auto-backpor…
52059e4
…t-of-pr-31020-on-v3.10.x

Backport PR matplotlib#31020 on branch v3.10.x (DOC: Fix doc builds with Sphinx 9)
@ksunden
Merge pull request matplotlib#31280 from meeseeksmachine/auto-backpor…
851f769
…t-of-pr-31278-on-v3.10.x

Backport PR matplotlib#31278 on branch v3.10.x (Fix `clabel` manual argument not accepting unit-typed coordinates)
@ksunden
Merge pull request matplotlib#31078 from meeseeksmachine/auto-backpor…
e3fb541
…t-of-pr-31075-on-v3.10.x

Backport PR matplotlib#31075 on branch v3.10.x (Fix remove method for figure title and xy-labels)
@WeatherGod @ksunden
Merge pull request matplotlib#31282 from scottshambaugh/tex_no_shell
acc6024
SEC: Block shell escapes in latex and ps commands
(cherry picked from commit 8ff895d)

The test that was edited had significant updates on main, so the old
test was kept on backport and no similar call exists in the old test.
@github-actions github-actions Bot added topic: widgets/UI backend: pgf backend: agg backend: ps backend: svg topic: toolbar topic: text/fonts topic: text/mathtext topic: contour topic: figures and subfigures Documentation: build building the docs CI: Run cygwin Run cygwin tests on a PR Documentation: examples files in galleries/examples Documentation: tutorials files in galleries/tutorials labels Apr 21, 2026
@ksunden

ksunden commented Apr 21, 2026

Copy link
Copy Markdown
Member Author

I am confused as to why the cherry pick pulled in all of this... please hold

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@github-actions github-actions Bot added the status: needs rebase label Apr 21, 2026
@ksunden ksunden closed this Apr 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

backend: agg backend: pgf backend: ps backend: svg CI: Run cygwin Run cygwin tests on a PR Documentation: build building the docs Documentation: examples files in galleries/examples Documentation: tutorials files in galleries/tutorials status: needs rebase topic: contour topic: figures and subfigures topic: text/fonts topic: text/mathtext topic: toolbar topic: widgets/UI

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

10 participants

@ksunden @steveberardi @timhoffm @rcomer @scottshambaugh @QuLogic @aman-coder03 @Vikash-Kumar-23 @tacaswell @WeatherGod
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.