Alexander Belopolsky added the comment: See also issue8855. I believe Anatoly refers to http://docs.python.org/py3k/library/pickle.html I agree, the warning can be moved up so that it is visible on the first page in typical rendering. Note that there is also http://docs.python.org/py3k/tutorial/inputoutput.html#the-pickle-module which contains no warning at all. ---------- keywords: +easy nosy: +belopolsky stage: -> needs patch type: -> feature request _______________________________________ Python tracker http://bugs.python.org/issue9105 _______________________________________

Scott Lawrence added the comment: Patch warning in relevant places of pickle's vulnerability to insecure data, including the place referenced by issue8855. ---------- keywords: +patch nosy: +bytbox Added file: http://bugs.python.org/file18057/picklesec.patch _______________________________________ Python tracker http://bugs.python.org/issue9105 _______________________________________

Alexander Belopolsky added the comment: The patch does not apply to py3k. Also, when you generate patches please do so from the root directory of the branch. For example, tutorial/inputoutput.rst should be patched as Doc/tutorial/inputoutput.rst. Thanks. ---------- _______________________________________ Python tracker http://bugs.python.org/issue9105 _______________________________________

Changes by Terry J. Reedy : ---------- versions: +Python 3.1 -Python 2.6 _______________________________________ Python tracker http://bugs.python.org/issue9105 _______________________________________

Georg Brandl added the comment: Moved pickle warning in r85621. A warning in shelve was already added for issue8855. For the tutorial, I don't think a warning needs to be added. Same goes for logging. ---------- nosy: +georg.brandl status: open -> closed _______________________________________ Python tracker http://bugs.python.org/issue9105 _______________________________________