2022 Developer Survey is open! Take survey.

Hot answers tagged

14 votes

Safely load a pickle file?

The Python manual comes with a warning about the pickle module: Warning The pickle module is not secure against erroneous or maliciously constructed data. Never unpickle data received from an ...
user avatar
  • 64.2k
3 votes

Safely load a pickle file?

Is there any way we can safely load a pickle? You've asked for any way, but it partly depends not only on the way, but on the pickle in question and on what you mean by "safely." Unless you mean ...
user avatar
  • 361
1 vote

Scanning WordPress for security vulnerabilities

You should notice that WordPress is a content management system (CMS). Systems like that are designed for modifying web pages. That includes adding and modifying HTML, JavaScript, HTTP redirects etc. –...
user avatar
1 vote

Fortify and third-party libraries

So, I don't know why they did this, but knowing developers and their attitude towards third party software here's my speculation: Developers tend not care about the whole system, they want to know ...
user avatar
  • 2,115
1 vote

HP Fortify scan automation

As others have mentioned, Fortify and most scan tools don't just scan the delta of files changed. They scan the entire code base. With Fortify, it's a resource intensive tool by nature. And if you ...
user avatar
  • 380
1 vote

HP Fortify scan automation

It can't be done with that tools. I have the same "problem" as you using exactly the same tools. Anyway, from a security point of view is not a problem. In my opinion to scan only certain part of ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible