瀏覽

  • 索引
  • 模組 |
  • 下一頁 |
  • 上一頁 |
  • Python »
  • 3.9.6 Documentation »
  • Python 標準函式庫 (Standard Library) »
  • |

Security Considerations¶

The following modules have specific security considerations:

  • cgi: CGI security considerations

  • hashlib: all constructors take a "usedforsecurity" keyword-only argument disabling known insecure and blocked algorithms

  • http.server is not suitable for production use, only implementing basic security checks

  • logging: Logging configuration uses eval()

  • multiprocessing: Connection.recv() uses pickle

  • pickle: Restricting globals in pickle

  • random shouldn't be used for security purposes, use secrets instead

  • shelve: shelve is based on pickle and thus unsuitable for dealing with untrusted sources

  • ssl: SSL/TLS security considerations

  • subprocess: Subprocess security considerations

  • tempfile: mktemp is deprecated due to vulnerability to race conditions

  • xml: XML vulnerabilities

  • zipfile: maliciously prepared .zip files can cause disk volume exhaustion

上個主題

未创建文档的模块

下個主題

扩展和嵌入 Python 解释器

本頁

  • 回報錯誤
  • 顯示原始碼

瀏覽

  • 索引
  • 模組 |
  • 下一頁 |
  • 上一頁 |
  • Python »
  • 3.9.6 Documentation »
  • Python 標準函式庫 (Standard Library) »
  • |
© 版權所有 2001-2021, Python Software Foundation.
The Python Software Foundation is a non-profit corporation. Please donate.

最後更新於 8月 30, 2021。 Found a bug?
Created using Sphinx 2.4.4.