id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
12102	Relative PYTHONPATH in the docs	Alexander Konovalenko		"In at least [http://docs.djangoproject.com/en/dev/internals/contributing/#running-the-unit-tests one place] in the documentation you explicitly recommend setting the `PYTHONPATH` environment variable to a relative path:

{{{
PYTHONPATH=..
./runtests.py --settings=settings generic_relations i18n
}}}

There is an obvious security risk associated with relative paths.

Suggestions:

1. Change the above line to something like {{{PYTHONPATH=`pwd`/..}}}

2. Add a warning everywhere in the docs where you mention setting the `PYTHONPATH` variable that for security reasons it must contain absolute paths only."		closed	Documentation	1.1		fixed			Accepted	1	0	0	0	0	0