gh-125140: Remove the current directory from sys.path when using pyrepl

Signed-off-by: Pablo Galindo <[email protected]>

Author: pablogsal

Lib/site.py

@@ -497,15 +497,21 @@ def register_readline():
         PYTHON_BASIC_REPL = False
 
     import atexit
+    import sys
     try:
         import readline
         import rlcompleter  # noqa: F401
         if PYTHON_BASIC_REPL:
             CAN_USE_PYREPL = False
         else:
-            import _pyrepl.readline
-            import _pyrepl.unix_console
-            from _pyrepl.main import CAN_USE_PYREPL
+            original_path = sys.path
+            sys.path = [p for p in original_path if p != '']
+            try:
+                import _pyrepl.readline
+                import _pyrepl.unix_console
+                from _pyrepl.main import CAN_USE_PYREPL
+            finally:
+                sys.path = original_path
     except ImportError:
         return
 

Misc/NEWS.d/next/Security/2024-10-09-20-08-13.gh-issue-125140.YgNWRB.rst

@@ -0,0 +1 @@
+Remove the current directory from sys.path when using pyrepl