Tom Eastman - Serialization formats are not toys - PyCon 2015
PyCon 2015 — Apr 12, 2015 — conference
Why watch
Tom Eastman explains security vulnerabilities in XML, YAML, and JSON parsing, covering XXE attacks, dangerous YAML features like arbitrary code execution, and deserialization risks. This talk is for Python developers who process external data and need to understand how seemingly harmless serialization formats can be exploited.