Message266465
When I discovered str(b'bytes') in my Python 3 program was causing errors to be serialized to disk, I was unhappy. It turns out there is a command line option to turn it off, but the vulnerable serialization code is not going to be able to set that argument; or the one-argument-per-shebang limit we have in Linux was already used for something else.
Instead, provide a threadlocal variable that causes str(bytes) to raise. A context manager makes it simple to use for just a portion of your code:
with string.StrBytesRaises():
no_str_bytes_here()
If not set or False then Python behaves as before. |
|
Date |
User |
Action |
Args |
2016-05-27 02:35:16 | dholth | set | recipients:
+ dholth, vstinner, ezio.melotti |
2016-05-27 02:35:15 | dholth | set | messageid: <1464316515.99.0.657478307138.issue27134@psf.upfronthosting.co.za> |
2016-05-27 02:35:15 | dholth | link | issue27134 messages |
2016-05-27 02:35:14 | dholth | create | |
|