Falldog comments

Results 23 comments of


                                            Falldog

trafficstars

[Security🔐] Leak source code by hacking `marshal.loads` function

Thanks the elaboration of @dx-77 @ZhaoQi99 I think you are using the partial encrypted solution. Partial encrypted ([README Link](https://github.com/Falldog/pyconcrete?tab=readme-ov-file#partial-encrypted-pyconcrete-as-lib)). I think there are hundreds way to hack it. If your...

[Security🔐] Leak source code by hacking `marshal.loads` function

> In my view, [Django](https://github.com/Falldog/pyconcrete/blob/master/example/django/Dockerfile) can only use partial encrypted solution. Is it this? In develop & staging environment, you could encrypt django entrypoint `manage.py` and launch it by pyconcrete...

[Security🔐] Leak source code by hacking `marshal.loads` function

After v1.1.0 released, the full encryption would be default option. Reference #119 In general case, you better should use the fully encryption mode (pyconcrete exe). For the web service case,...