windows: require IPYTHON_USE_PROGRAMDATA=1 opt-in to trust programdata

minrk · minrk · commit 5bef67f426b9 · 2026-03-24T14:22:20.000-07:00
diff --git a/IPython/core/application.py b/IPython/core/application.py
@@ -33,10 +33,11 @@
 )
 
 if os.name == "nt":
+    # %PROGRAMDATA% is not safe by default, require opt-in to trust it
     programdata = os.environ.get("PROGRAMDATA", None)
-    if programdata is not None:
+    if os.environ.get("IPYTHON_USE_PROGRAMDATA") == "1" and programdata is not None:
         SYSTEM_CONFIG_DIRS = [str(Path(programdata) / "ipython")]
-    else:  # PROGRAMDATA is not defined by default on XP.
+    else:
         SYSTEM_CONFIG_DIRS = []
 else:
     SYSTEM_CONFIG_DIRS = [
