Skip to content

Commit 53edf83

Browse files
committed
gh-111264: Add a note about untrusted input to tomllib docs
1 parent 2f4eb34 commit 53edf83

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Doc/library/tomllib.rst

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ support writing TOML.
1919
Added TOML 1.1.0 support.
2020
See the :ref:`What's New <whatsnew315-tomllib-1-1-0>` for details.
2121

22+
.. note::
23+
24+
Be cautious when parsing data from untrusted sources.
25+
A malicious TOML string may cause the decoder to consume considerable
26+
CPU and memory resources.
27+
Limiting the size of data to be parsed is recommended.
2228

2329
.. seealso::
2430

0 commit comments

Comments
 (0)