Message 151748 - Python tracker (original) (raw)

You said above that it should be hardcoded; if so, how can it be changed at run-time from an environment variable? Or am I misunderstanding.

You're right, I used the wrong word. I meant it should be a constant independently of the dict size. But, indeed, not hard-coded in the source.

BTW, presumably if we do it, we should do it for sets as well?

Yeah, and use the same env var / sys function.

Despite the "DICT" in the title? OK.

Well, dict is the most likely target for these attacks.