question: how to transfer objects between server and client?

Lawrence D'Oliveiro ldo at geek-central.gen.new_zealand
Mon Aug 13 05:34:30 CEST 2007


In message <1186826410.019139.121680 at l70g2000hse.googlegroups.com>,
OpenPavilion wrote:

> just found out, that if I use "pickle.dumps(object)" (on client side)
> and "pickle.loads(object)" (on server side) before and after sending,
> I have access to the object.

That's assuming that the client and server can trust each other. If you
can't be sure of that, then this sounds like it could be a security hole.



More information about the Python-list mailing list