pi-lens/rules/ast-grep-rules/rule-tests/no-marshal-load-test.yml

Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo

id: no-marshal-load
valid:
  - "obj = json.loads(data)"
  - "obj = pickle.loads(data)"
  - "import json; json.loads(request.body)"
invalid:
  - "obj = marshal.loads(data)"
  - "obj = marshal.load(f)"
  - "data = marshal.dumps(obj)"
  - "bytes_ = marshal.dumps(obj)"