[Python-ideas] Adding a safe alternative to pickle in the standard library

Stephen J. Turnbull stephen at xemacs.org
Thu Feb 21 19:29:57 CET 2013


Steve Dower writes:

 > In a past life I used pickle regularly to snapshot long-running
 > (evolutionary) algorithms that used user-provided classes

And how do you propose to prevent user-provided exploits, then?

Nobody wants to take away the power of pickle if it imposes only risks
you're happy to bear.  The question here is "is it possible to be
*safer* than pickle without giving up any of the power?"



More information about the Python-ideas mailing list