3 ms·
So they were pickeling EXECUTABLE objects in the session and storing it in the users browser cookie? Interesting. Nice find.
by nickthemagicman 8y ago
So they were pickeling EXECUTABLE objects in the session and storing it in the users browser cookie?
Interesting.
Nice find.
- ebikelaw 8y agoThere is no such thing as non-executable pickle. Pickle is not safe and must not be used for anything, ever.
- nickthemagicman 8y agoWow. I have to look into it. That sounds wildy unsafe