Uranium
Application Framework
Loading...
Searching...
No Matches
UM.Settings.DefinitionContainerUnpickler.DefinitionContainerUnpickler Class Reference

Public Member Functions

 find_class (self, module, name)

Detailed Description

Pickle by itself is not safe at all. We can't use any kind of signing, since the code itself is open (and at that
point it would be trivially easy to read the secret used to sign it).

What we can do is simply whitelist the things that the DefinitionContainer needs (and prevent everything else!)

This obviously only protects against malicious cache files where the attacker (or user) can't modify the python
files. This is common for setups where users don't have admin permission or have other more strict restrictions.

The documentation for this class was generated from the following file:
  • UM/Settings/DefinitionContainerUnpickler.py