2 ms·
No, just switch from pickle to json.
by ashitlerferad 10y ago
No, just switch from pickle to json.
- sitkack 10y agoBut how would you get arbitrary code execution? Pickle does solve a lot of problems, but it creates so many that I think it should be removed from the battery pack. You can't make HMAC integrity checks optional, and you make the mandatory by breaking the payload.