On 10/29/13 12:12 PM, Patrick wrote:
Hi Everyone
I was just wondering if anyone had tried to implement a pickle virtual
machine in another language? I was thinking that it might make for a
nice little form of cross language IPC within a trusted environment.
Pickle can execute class constructors, which is what makes it insecure.
But this also means that you need to have the class definitions on the
receiving end, which means the receiving end must be in Python. Unless
you special-case some set of Python classes and their equivalents in the
other language, you are limited to the primitive builtins like string,
dict, list, float, etc. In that case, you might as well just use json
as your transport format.
--Ned.
--
https://mail.python.org/mailman/listinfo/python-list