RE: [Webware-discuss] PickleRPCServlet

[Geoffrey T. <gta...@na...>]

Chuck,


This seems to implement a safe unpickler that refuses to unpickle any class
instances.

It might be worth posting to comp.lang.python to see if this is really as
safe as it seems.


	import cPickle, cStringIO

	def safe_load(file):
		safeUnpickler = cPickle.Unpickler(file)
		safeUnpickler.find_global = None
		return safeUnpickler.load()

	def safe_loads(str):
		return safe_load(cStringIO.StringIO(str))

-- 

- Geoff Talvola
  gtalvola@NameConnector.com