# # AUTHOR , YEAR. # msgid "" msgstr "" "Project-Id-Version: 0\n" "POT-Creation-Date: 2013-08-13T01:54:52\n" "PO-Revision-Date: 2013-08-13T01:54:52\n" "Last-Translator: Automatically generated\n" "Language-Team: None\n" "MIME-Version: 1.0\n" "Content-Type: application/x-publican; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. Tag: title #, no-c-format msgid "The Python Programming Language" msgstr "" #. Tag: para #, no-c-format msgid "Python provides memory safety by default, so low-level security vulnerabilities are rare and typically needs fixing the Python interpreter or standard library itself." msgstr "" #. Tag: para #, no-c-format msgid "Other sections with Python-specific advice include:" msgstr "" #. Tag: para #, no-c-format msgid "" msgstr "" #. Tag: para #, no-c-format msgid "" msgstr "" #. Tag: para #, no-c-format msgid ", in particular " msgstr "" #. Tag: para #, no-c-format msgid "" msgstr "" #. Tag: title #, no-c-format msgid "Dangerous standard library features" msgstr "" #. Tag: para #, no-c-format msgid "Some areas of the standard library, notably the ctypes module, do not provide memory safety guarantees comparable to the rest of Python. If such functionality is used, the advice in should be followed." msgstr "" #. Tag: title #, no-c-format msgid "Run-time compilation and code generation" msgstr "" #. Tag: para #, no-c-format msgid "The following Python functions and statements related to code execution should be avoided:" msgstr "" #. Tag: para #, no-c-format msgid "compile" msgstr "" #. Tag: para #, no-c-format msgid "eval" msgstr "" #. Tag: para #, no-c-format msgid "exec" msgstr "" #. Tag: para #, no-c-format msgid "execfile" msgstr "" #. Tag: para #, no-c-format msgid "If you need to parse integers or floating point values, use the int and float functions instead of eval. Sandboxing untrusted Python code does not work reliably." msgstr "" #. Tag: title #, no-c-format msgid "Sandboxing" msgstr "" #. Tag: para #, no-c-format msgid "The rexec Python module cannot safely sandbox untrusted code and should not be used. The standard CPython implementation is not suitable for sandboxing." msgstr ""