Re: [Python-Dev] XML DoS vulnerabilities and exploits in Python

2013年2月20日 23:01:46 -0800

On 2013年2月21日 10:38:07 +1000
Nick Coghlan <[email protected]> wrote:
> On Thu, Feb 21, 2013 at 9:49 AM, Tres Seaver <[email protected]> wrote:
> > Two words: "hash randomization". If it applies to one, it applies to
> > the other.
> 
> Agreed. Christian's suggested approach sounds sane to me:
> 
> - make it possible to enable safer behaviour globally in at least 2.7
> and 3.3 (and perhaps in 2.6 and 3.2 security releases as well)
> - make the safer behaviour the default in 3.4
> - make it possible to selectively disable the safeguards in all versions
+1 from me.
Regards
Antoine.
_______________________________________________
Python-Dev mailing list
[email protected]
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to