spyder-ide / spyder-docs

Documentation for Spyder, the Scientific Python Development Environment
https://docs.spyder-ide.org
MIT License
33 stars 283 forks source link

Add warning about only loading .spydata files from trusted sources #330

Closed CAM-Gerlach closed 2 years ago

CAM-Gerlach commented 2 years ago

Pull Request

Pull Request Checklist

Description of Changes

Adds a warning to remind users to not load .spydata data unless they created it themselves, or they verifiably trust its source, since it inherently runs untrusted code.

Issue(s) Resolved

Fixes #328

CAM-Gerlach commented 2 years ago

Yeah, I'm not super solid on that particular word either—any alternate suggestions? Or, should I just elide it?

jitseniesen commented 2 years ago

I would remove it, but if you feel it should be stronger than just "trust", how about "fully trust" or "completely trust"?

CAM-Gerlach commented 2 years ago

Yeah, my intent there was to emphasize that users should not only think they trust it, but also verify that they did so—the old "trust but verify" (since users may implicitly trust that, e.g., an email came from a close college, when it in fact was phishing, spoofing, a hacked account, etc). But I'm not sure that comes across clearly. In any case, I changed it to "fully" :+1: .