homepage

Logged In: YES 
user_id=73023
It sounds like there are some documentation bugs:
- The security ramifications are not discussed, nor are the
remedies.
- The cPickle module isn't documented very well. I submitted
some
 documentation a long time ago that never got incorporated
AFAIK.
 I wish I still had it. :)
- cPickle has a feature for turning off instance support and
for 
 restricting which classes can be unpickled. You can set
the find_global
 attribute on a cPickle.Unpickler. The find_global
attribute can be 
 a function or None. If it is None, then no instances can
be 
 unpickled. If it is a function, then it should accept a
module and name
 and return the corresponding global. It is responsible
for looking
 up the global and can raise an error to prevent a
global's use.
 See the ZEO storage server implementation for an example
 of using this hook.