The Real Python Podcast cover image

Explaining Access Control Using Python & Cautiously Handling Pickles

The Real Python Podcast

00:00

Unpickling Untrusted Objects in Python 2.2

The pickle module is a tool that lets you look at how your code is being translated behind the scenes. In previous versions of Python, unpickling would actually do a safety check in on certain operations refusing to call functions or constructors that would be marked as safe for unpickling by either. Chris: It's always been kind of an interesting little tool that's built into Python. The fact that it goes beyond something like JSON that's primarily taking data and can actually allow you to include import statements of importing OS allows you to do these malicious things.

Transcript
Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app