re-creating objects and security
Dave Brennan (brennan@hal.com)
31 Aug 1994 19:07:07 GMT
I'm considering storing data that needs to be used in a Python
program as eval-able or marshalled Python objects. The only
problem is that I need to make sure that when the objects are
constructed from the store that no methods are called. This
prevents people from sticking virus code in the data files.
Is this possible with the current version of Python? If not
is it possibly an easy change to have a boolean flag that would
make Python raise an error on an attempt to call a method?
--
Dave Brennan HaL Computer Systems, Austin, TX, USA
brennan@hal.com http://www.hal.com/~brennan