Re:Pickle Serialization in Data Science
by compressedgas on Monday March 28, 2022 @08:48PM
(#30837402)
Oddly fixing the security problem of pickle is actually easy and not mentioned in the article: limit what callables that are allowed to be called during unpickling.
The pickle module doesn't directly supports doing this as one has to implement a Unpickler subclass to override find_class to permit only the callables from modules that are acceptable to be called.
The pickle module doesn't directly supports doing this as one has to implement a Unpickler subclass to override find_class to permit only the callables from modules that are acceptable to be called.