Re: [Python-Dev] We cannot fix all issues: let's close XML security issues (not fix them)

2018年9月07日 01:56:04 -0700

* Victor Stinner <[email protected]>, 2018年09月06日, 16:40:
I'm also dubious about PyYAML which allows to run arbitrary Python code in a configuration *by default*. But well, it seems like nobody stepped in to change the default.
PyYAML maintainers intend to change the default soon:
https://github.com/yaml/pyyaml/issues/207
--
Jakub Wilk
_______________________________________________
Python-Dev mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to