unpickle from URL problem

Alan Isaac aisaac at american.edu
Wed Oct 10 11:28:54 EDT 2007


Jean-Paul Calderone wrote:
> You shouldn't unpickle things you get from the network, since pickle can
> execute arbitrary code: http://jcalderone.livejournal.com/15864.html


Yes, but I have my reasons.
(This is not library code: I just want students
to all be using the same objects for an exercise,
and I need not to worry about their directory structure.)

Can you explain the differences I see?

Thank you,
Alan Isaac



More information about the Python-list mailing list