Pickle warning about insecurity is located only at the second page near the bottom of "Relationship to other Python modules" chapter. For me the proper place for it is the first page of documentation.

See also issue8855.

I believe Anatoly refers to 

http://docs.python.org/py3k/library/pickle.html

I agree, the warning can be moved up so that it is visible on the first page in typical rendering.

Note that there is also

http://docs.python.org/py3k/tutorial/inputoutput.html#the-pickle-module

which contains no warning at all.

Also http://docs.python.org/library/pickle.html

http://docs.python.org/library/logging.html#sending-and-receiving-logging-events-across-a-network
and
http://mail.python.org/pipermail/python-dev/2010-June/101179.html

The link to Nadia blog is also very helpful for investigation of pickle problems http://nadiana.com/python-pickle-insecure

Patch warning in relevant places of pickle's vulnerability to insecure data, including the place referenced by issue8855.

LGTM

Unless someone objects, I will check that the patch generates reasonable HTML and apply.

The patch does not apply to py3k.  Also, when you generate patches please do so from the root directory of the branch.  For example, tutorial/inputoutput.rst should be patched as Doc/tutorial/inputoutput.rst.

Thanks.

FWIW, I agree too. The current location is a bit odd.

Moved pickle warning in r85621.  A warning in shelve was already added for issue8855.

For the tutorial, I don't think a warning needs to be added.  Same goes for logging.