Security · interview question
A teammate submits shaky deserialization safety code. Which review comment is the strongest?
Multiple choiceHardchapter-17-curatedpremiumsecuritydeserialization-safety
Answer and explanation
Correct answer
B. Make the rule clearer and easier to explain. Parse data with clear expectations and avoid unsafe object-loading patterns that execute or infer too much.
Why
The best review comment anchors the change to readability, correctness, and future maintenance. Treating deserialization as harmless plumbing can turn malformed input into surprising runtime behavior.
Test yourself on Security
A free test with instant, explained results. No account needed.
More Security questions
- What is the healthiest performance judgment around secrets management?
- What is the clearest sign that code around secrets management should be refactored?
- Which boundary choice best fits log redaction in a maintainable Python system?
- If input validation fails in production, what handling philosophy is strongest?
- Which response shows the healthiest evidence-first mindset around input validation?
- When is log redaction being used in the wrong way?