7 ms·
Some environments use code-signing as a security mechanism. Arbitrary execution via pickle creates holes in this mechanism, requiring additional mitigations.
by jamesdutc 9y ago
Some environments use code-signing as a security mechanism.
Arbitrary execution via pickle creates holes in this mechanism, requiring additional mitigations.
PEP-551 briefly discusses security motivations and potential mechanisms for environments where code execution is locked down:
https://www.python.org/dev/peps/pep-0551/ https://www.python.org/dev/peps/pep-0551/