Skip to content

Commit fb8d8d9

Browse files
Add a warning about untrusted input to configparser docs (#146276)
1 parent 4561f64 commit fb8d8d9

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

Doc/library/configparser.rst

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,11 @@ can be customized by end users easily.
2424
This library does *not* interpret or write the value-type prefixes used in
2525
the Windows Registry extended version of INI syntax.
2626

27+
.. warning::
28+
Be cautious when parsing data from untrusted sources. A malicious
29+
INI file may cause the decoder to consume considerable CPU and memory
30+
resources. Limiting the size of data to be parsed is recommended.
31+
2732
.. seealso::
2833

2934
Module :mod:`tomllib`

0 commit comments

Comments
 (0)