docs do not mention if loading application data from config files is a security risk or not
未关闭
- 主要语言
- Python
- 星标
- 653
- 派生
- 217
- 平均合并
- 2 天 21 小时
- 30 天内合并 PR
- 2
描述
In [the docs on Traitlets configuration via config files](https://traitlets.readthedocs.io/en/stable/config.html#python-configuration-files) the section does not indicate whether arbitrary or potentially malicious code is prevented from executing in these files.
Are there any security risks involved in using plain Python for traitlets config files?
贡献指南
评估
这个 Issue 还没有评估数据。