Skip to content

[FIX] read/write: (Un)pickle only on user confirmation#127

Open
ales-erjavec wants to merge 17 commits into
biolab:masterfrom
ales-erjavec:readwrite-pickle-only-on-confirmation
Open

[FIX] read/write: (Un)pickle only on user confirmation#127
ales-erjavec wants to merge 17 commits into
biolab:masterfrom
ales-erjavec:readwrite-pickle-only-on-confirmation

Conversation

@ales-erjavec

Copy link
Copy Markdown
Collaborator

Issue

Pickle format is used in the serialization (as a fallback when parameters cannot be saved as a python literal).

Changes

  • When saving: warn and ask for confirmation when the saved workflow will contain unsafe content.

  • When loading: warn and ask for confirmation; optionally load only workflow structure without parameters.

@janezd

janezd commented Sep 25, 2020

Copy link
Copy Markdown
Contributor

@@ -804,16 +1006,16 @@ def check(obj):
return all(map(check, obj))

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ales-erjavec, on Friday I didn't yet realize that .ows files contain literals, not json. I am always a few (well, a many) steps behind. :|

The list of allowed sequences does not include sets. I suppose it's because there's no literal for an empty set. But could non-empty sets be allowed?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No. It would need to be all sets or none at all.

@ales-erjavec
ales-erjavec force-pushed the readwrite-pickle-only-on-confirmation branch from a69c669 to a11e98a Compare January 4, 2021 10:07
@ales-erjavec
ales-erjavec force-pushed the readwrite-pickle-only-on-confirmation branch from a11e98a to ff42430 Compare February 17, 2021 11:08
@ales-erjavec
ales-erjavec force-pushed the readwrite-pickle-only-on-confirmation branch from ff42430 to 28847dd Compare August 20, 2021 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants