Commit 0036bcf8 authored by Georg Brandl's avatar Georg Brandl

#9105: move pickle warning to a bit more prominent location.

parent 047e486c
...@@ -23,6 +23,12 @@ into an object hierarchy. Pickling (and unpickling) is alternatively known as ...@@ -23,6 +23,12 @@ into an object hierarchy. Pickling (and unpickling) is alternatively known as
"serialization", "marshalling," [#]_ or "flattening", however, to avoid "serialization", "marshalling," [#]_ or "flattening", however, to avoid
confusion, the terms used here are "pickling" and "unpickling".. confusion, the terms used here are "pickling" and "unpickling"..
.. warning::
The :mod:`pickle` module is not intended to be secure against erroneous or
maliciously constructed data. Never unpickle data received from an untrusted
or unauthenticated source.
Relationship to other Python modules Relationship to other Python modules
------------------------------------ ------------------------------------
...@@ -63,12 +69,6 @@ The :mod:`pickle` module differs from :mod:`marshal` several significant ways: ...@@ -63,12 +69,6 @@ The :mod:`pickle` module differs from :mod:`marshal` several significant ways:
The :mod:`pickle` serialization format is guaranteed to be backwards compatible The :mod:`pickle` serialization format is guaranteed to be backwards compatible
across Python releases. across Python releases.
.. warning::
The :mod:`pickle` module is not intended to be secure against erroneous or
maliciously constructed data. Never unpickle data received from an untrusted
or unauthenticated source.
Note that serialization is a more primitive notion than persistence; although Note that serialization is a more primitive notion than persistence; although
:mod:`pickle` reads and writes file objects, it does not handle the issue of :mod:`pickle` reads and writes file objects, it does not handle the issue of
naming persistent objects, nor the (even more complicated) issue of concurrent naming persistent objects, nor the (even more complicated) issue of concurrent
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment