Secure!

2026-08-28 18:59:42 +02:00 · 2025-05-08 16:49:01 -07:00
parent b3ea406e81
commit ed3f05260a
1 changed files with 1 additions and 1 deletions
@@ -235,7 +235,7 @@ class JsonPlusSerializer(SerializerProtocol):
            return ormsgpack.unpackb(
                data_, ext_hook=self._unpack_ext_hook, option=ormsgpack.OPT_NON_STR_KEYS
            )
-        elif type_ == "pickle":
+        elif self.pickle_fallback and type_ == "pickle":
            return pickle.loads(data_)
        else:
            raise NotImplementedError(f"Unknown serialization type: {type_}")