diff --git a/vulnerable_deserialization.py b/vulnerable_deserialization.py index 4d443d1..be73c9f 100644 --- a/vulnerable_deserialization.py +++ b/vulnerable_deserialization.py @@ -37,7 +37,8 @@ def import_data(): import_file = request.files['file'] content = import_file.read() - data = pickle.loads(content) + import json as _json + data = _json.loads(content) return f"Imported: {data}"