write_simple_index() builds simple_index_template with Jinja2 Template() and does not enable autoescape, then inserts the project name (pulp_python/app/utils.py). write_simple_detail() in the same file passes autoescape=True. The name is taken from package metadata with no character allow-list (parse_project_metadata). SimpleView list and retrieve allow principal *. Browsers get the HTML renderer by default. Upload requires an authenticated user with python.modify_pythonrepository. A viewer of that HTML runs the markup in the origin that served the index. This does not by itself run operating-system commands. The template was added in 3fd41a55, first tag 3.0.0b1.

Red Hat does not ship the pulp-python server. Satellite 6.16, 6.17, 6.18, and 6.19 ship rubygem-pulp_python_client only. That package is the Ruby API client. It does not generate the simple index.