Logo

上個主題

xdrlib --- XDR 資料的編碼與解碼

下個主題

擴充和嵌入 Python 直譯器

此頁面

  • 回報錯誤
  • 顯示原始碼

瀏覽

  • 索引
  • 模組 |
  • 下一頁 |
  • 上一頁 |
  • python logo
  • Python »
  • 3.10.12 Documentation »
  • Python 標準函式庫 (Standard Library) »
  • Security Considerations
  • |

Security Considerations¶

The following modules have specific security considerations:

  • base64: base64 security considerations in RFC 4648

  • cgi: CGI security considerations

  • hashlib: all constructors take a "usedforsecurity" keyword-only argument disabling known insecure and blocked algorithms

  • http.server is not suitable for production use, only implementing basic security checks. See the security considerations.

  • logging: Logging configuration uses eval()

  • multiprocessing: Connection.recv() uses pickle

  • pickle: Restricting globals in pickle

  • random shouldn't be used for security purposes, use secrets instead

  • shelve: shelve is based on pickle and thus unsuitable for dealing with untrusted sources

  • ssl: SSL/TLS security considerations

  • subprocess: Subprocess security considerations

  • tempfile: mktemp is deprecated due to vulnerability to race conditions

  • xml: XML vulnerabilities

  • zipfile: maliciously prepared .zip files can cause disk volume exhaustion

上個主題

xdrlib --- XDR 資料的編碼與解碼

下個主題

擴充和嵌入 Python 直譯器

此頁面

  • 回報錯誤
  • 顯示原始碼

瀏覽

  • 索引
  • 模組 |
  • 下一頁 |
  • 上一頁 |
  • python logo
  • Python »
  • 3.10.12 Documentation »
  • Python 標準函式庫 (Standard Library) »
  • Security Considerations
  • |
© 版權 2001-2023, Python Software Foundation.
This page is licensed under the Python Software Foundation License Version 2.
Examples, recipes, and other code in the documentation are additionally licensed under the Zero Clause BSD License.
See History and License for more information.

The Python Software Foundation is a non-profit corporation. Please donate.

最後更新於 7月 02, 2023。 Found a bug?
Created using Sphinx 3.4.3.