[TriZPUG] What The Rails Security Issue Means For You

[Karen Tracey]

On Mon, Feb 4, 2013 at 3:32 PM, Chris Calloway <cbc at unc.edu> wrote:

> (Does the comment about Cookie.Cookie apply to http.cookies in Python 3?)


It is SerialCookie and SmartCookie that have the security warnings in
Python 2:

http://docs.python.org/2/library/cookie.html#Cookie.SerialCookie

I can find no mention of these variants existing in Python 3, nor any use
of pickle in the Python 3 source code for the http cookies and cookiejar
modules, so I think they are gone in Python 3.

Karen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/trizpug/attachments/20130204/70ee826c/attachment.html>