diff options
author | Larry Hastings <larry@hastings.org> | 2014-03-15 21:13:56 -0700 |
---|---|---|
committer | Larry Hastings <larry@hastings.org> | 2014-03-15 21:13:56 -0700 |
commit | dd41bd5789a0cf851e7ceda561ca7e77533a5190 (patch) | |
tree | db01288069f6b30ab02d75e0ac66456864a27861 /Doc/library/logging.config.rst | |
parent | 5ae7d6b3216b1996a0073415661b82470e03407c (diff) | |
download | cpython-dd41bd5789a0cf851e7ceda561ca7e77533a5190.tar.gz |
Merge in all documentation changes since branching 3.4.0rc1.
Diffstat (limited to 'Doc/library/logging.config.rst')
-rw-r--r-- | Doc/library/logging.config.rst | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/Doc/library/logging.config.rst b/Doc/library/logging.config.rst index 5fb1b7a4f4..171b0a3ede 100644 --- a/Doc/library/logging.config.rst +++ b/Doc/library/logging.config.rst @@ -148,7 +148,9 @@ in :mod:`logging` itself) and defining handlers which are declared either in send it to the socket as a string of bytes preceded by a four-byte length string packed in binary using ``struct.pack('>L', n)``. - .. note:: Because portions of the configuration are passed through + .. note:: + + Because portions of the configuration are passed through :func:`eval`, use of this function may open its users to a security risk. While the function only binds to a socket on ``localhost``, and so does not accept connections from remote machines, there are scenarios where @@ -752,7 +754,9 @@ The ``class`` entry is optional. It indicates the name of the formatter's class :class:`~logging.Formatter` can present exception tracebacks in an expanded or condensed format. -.. note:: Due to the use of :func:`eval` as described above, there are +.. note:: + + Due to the use of :func:`eval` as described above, there are potential security risks which result from using the :func:`listen` to send and receive configurations via sockets. The risks are limited to where multiple users with no mutual trust run code on the same machine; see the |