quantulum3 icon indicating copy to clipboard operation
quantulum3 copied to clipboard

Stop using pickles

Open nielstron opened this issue 7 years ago • 1 comments

Pickles is insecure and the result is non-human readable so let's stop using it.

  • [x] include Version in serialized file

Possible Solution: There seems to be a nice tutorial on how to get around. http://thiagomarzagao.com/2015/12/08/saving-TfidfVectorizer-without-pickles/

For more information refer to https://github.com/marcolagi/quantulum/issues/2

More Info on pickles: https://youtu.be/7KnfGDajDQw

nielstron avatar Aug 28 '18 11:08 nielstron

Partly fixed by #114 only including classifiers built in travis. Thus the classifier in the package can be considered secure.

nielstron avatar Feb 04 '19 10:02 nielstron