GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — gh-111264: Add a note about untrusted input to tomllib docs by encukou · Pull Request #146209 · python/cpython

Conversation

@encukou

@encukou encukou commented Mar 20, 2026 •
edited by github-actions Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member
  • Issue: Document the security of tomllib for untrusted input #111264

📚 Documentation preview 📚: https://cpython-previews--146209.org.readthedocs.build/

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@encukou
pythongh-111264: Add a note about untrusted input to tomllib docs
53edf83
@encukou
encukou requested a review from hauntsaninja as a code owner March 20, 2026 13:14
@bedevere-app bedevere-app Bot added docs Documentation in the Doc dir skip news labels Mar 20, 2026
@github-project-automation github-project-automation Bot added this to Docs PRs Mar 20, 2026
@github-project-automation github-project-automation Bot moved this to Todo in Docs PRs Mar 20, 2026
@bedevere-app bedevere-app Bot mentioned this pull request Mar 20, 2026
Document the security of tomllib for untrusted input #111264
Closed
@bedevere-app bedevere-app Bot added the awaiting core review label Mar 20, 2026
@StanFromIreland StanFromIreland added the type-security A security issue label Mar 20, 2026
StanFromIreland
StanFromIreland reviewed Mar 20, 2026
View reviewed changes
Comment thread Doc/library/tomllib.rst Resolved

Uh oh!

There was an error while loading. Please reload this page.
hauntsaninja
hauntsaninja approved these changes Mar 20, 2026
View reviewed changes
@bedevere-app bedevere-app Bot added awaiting merge and removed awaiting core review labels Mar 20, 2026
@StanFromIreland StanFromIreland mentioned this pull request Mar 22, 2026
Add a warning about untrusted input to configparser docs #146276
Merged
@encukou @StanFromIreland
Update Doc/library/tomllib.rst
1fbdfa3 
Co-authored-by: Stan Ulbrych <[email protected]>
sethmlarson
sethmlarson approved these changes Apr 30, 2026
View reviewed changes
@read-the-docs-community

read-the-docs-community Bot commented Apr 30, 2026

Copy link
Copy Markdown

Documentation build overview

📚 cpython-previews | 🛠️ Build #32484231 | 📁 Comparing 1fbdfa3 against main (4599335)

  🔍 Preview build  

190 files changed · ± 188 modified · - 2 deleted

± Modified

  • contents.html
  • download.html
  • genindex-A.html
  • genindex-B.html
  • genindex-C.html
  • genindex-D.html
  • genindex-E.html
  • genindex-F.html
  • genindex-G.html
  • genindex-H.html
  • and 178 more...

- Deleted

  • c-api/sentinel.html
  • deprecations/soft-deprecations.html
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@encukou
Merge branch 'main' into toml-note
0d1a624
@encukou
encukou merged commit 9d41e2a into python:main Apr 30, 2026
29 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the awaiting merge label Apr 30, 2026
@github-project-automation github-project-automation Bot moved this from Todo to Done in Docs PRs Apr 30, 2026
@encukou encukou added needs backport to 3.13 only security fixes needs backport to 3.14 bugs and security fixes labels Apr 30, 2026
@miss-islington-app

miss-islington-app Bot commented Apr 30, 2026

Copy link
Copy Markdown

Thanks @encukou for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13.
🐍🍒⛏🤖 I'm not a witch! I'm not a witch!
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Apr 30, 2026

Copy link
Copy Markdown

Thanks @encukou for the PR 🌮🎉.. I'm working now to backport this PR to: 3.14.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Apr 30, 2026

Copy link
Copy Markdown

Sorry, @encukou, I could not cleanly backport this to 3.14 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 9d41e2a534aab460dd656ef251adaed5d2d64b93 3.14
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app miss-islington-app Bot assigned encukou Apr 30, 2026
@miss-islington-app

miss-islington-app Bot commented Apr 30, 2026

Copy link
Copy Markdown

Sorry, @encukou, I could not cleanly backport this to 3.13 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 9d41e2a534aab460dd656ef251adaed5d2d64b93 3.13
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@encukou
encukou deleted the toml-note branch May 1, 2026 07:39
@bedevere-app

bedevere-app Bot commented May 1, 2026

Copy link
Copy Markdown

GH-149223 is a backport of this pull request to the 3.14 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.14 bugs and security fixes label May 1, 2026
encukou added a commit that referenced this pull request May 1, 2026
@encukou @StanFromIreland
[3.14] gh-111264: Add a note about untrusted input to tomllib docs (G…
e6eac2b 
…H-146209) (GH-149223)

(cherry picked from commit 9d41e2a)

Co-authored-by: Stan Ulbrych <[email protected]>
@encukou

encukou commented May 1, 2026

Copy link
Copy Markdown
Member Author

#149226 is a backport of this pull request to the 3.13 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@encukou encukou removed the needs backport to 3.13 only security fixes label May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@StanFromIreland StanFromIreland StanFromIreland left review comments
@hauntsaninja hauntsaninja hauntsaninja approved these changes
@sethmlarson sethmlarson sethmlarson approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@encukou encukou

Labels

docs Documentation in the Doc dir skip news type-security A security issue

Projects

Docs PRs
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

4 participants

@encukou @hauntsaninja @sethmlarson @StanFromIreland
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.