spyder-ide / spyder-docs

Documentation for Spyder, the Scientific Python Development Environment
https://docs.spyder-ide.org
MIT License
33 stars 283 forks source link

Add warning not to import untrusted data in Variable Explorer #328

Closed jitseniesen closed 2 years ago

jitseniesen commented 2 years ago

Issue Report

Issue Description

Importing untrusted data in the variable explorer is unsafe because it uses pickle which executes arbitrary code. Users should be warned against this.

Where is the relevant portion of the documentation located?

Second line of https://github.com/spyder-ide/spyder-docs/blob/master/doc/panes/variableexplorer.rst#toolbar-buttons

What would you suggest it be replaced with?

Add a warning.

Other information

CAM-Gerlach commented 2 years ago

Thanks for documenting this; I've opened #330 to add it.