3 ms·
+1 for `dangerous_load`. If it was implemented this way, rather than `load` and `safe_load`, I doubt we would have seen vulnerabilities like the one in both tas
by gingerlime 14y ago
+1 for `dangerous_load`. If it was implemented this way, rather than `load` and `safe_load`, I doubt we would have seen vulnerabilities like the one in both tastypie and piston, the two leading API libraries for Django.
See https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/ https://www.djangoproject.com/weblog/2011/nov/01/piston-and-...
Whilst python might seem safer than the state in Ruby/Rails, it also has its history of vulnerabilities.