Chuck,

This seems to implement a safe unpickler that refuses to unpickle any class
instances.

It might be worth posting to comp.lang.python to see if this is really as
safe as it seems.


        import cPickle, cStringIO

        def safe_load(file):
                safeUnpickler = cPickle.Unpickler(file)
                safeUnpickler.find_global = None
                return safeUnpickler.load()

        def safe_loads(str):
                return safe_load(cStringIO.StringIO(str))

-- 

- Geoff Talvola
  [EMAIL PROTECTED]

_______________________________________________
Webware-discuss mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webware-discuss

Reply via email to