➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author dstufft
Recipients Claudiu.Popa, dstufft, eric.araujo, ezio.melotti, flox, loewis, rhettinger
Date 2013-08-25.13:16:21
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1377436581.58.0.112914056153.issue13397@psf.upfronthosting.co.za>
In-reply-to
Content 
-1

This essentially gives the ability for an XMLRPC server to crash any python code that interfaces with them unless you catch _every_ single exception including ones like SystemExit, KeyboardInterupt, SyntaxError, StopIteration etc.

An XMLRPC server is not a trusted resources and providing this option is akin to providing an option to unpickle arbitrary data received over the wire as well.
History
Date User Action Args
2013-08-25 13:16:21dstufftsetrecipients: + dstufft, loewis, rhettinger, ezio.melotti, eric.araujo, flox, Claudiu.Popa
2013-08-25 13:16:21dstufftsetmessageid: <1377436581.58.0.112914056153.issue13397@psf.upfronthosting.co.za>
2013-08-25 13:16:21dstufftlinkissue13397 messages
2013-08-25 13:16:21dstufftcreate