Signs the classifier so we have additional protections against tampering + pickle

2026-05-19 04:55:25 +00:00 · 2026-04-02 13:27:02 -07:00
parent 0c2fe1272b
commit 79784ac407
3 changed files with 156 additions and 81 deletions
@@ -402,6 +402,12 @@ Defaults to `/usr/share/nltk_data`

 : This is where paperless will store the classification model.

+    !!! warning
+
+        The classification model uses Python's pickle serialization format.
+        Ensure this file is only writable by the paperless user, as a
+        maliciously crafted model file could execute arbitrary code when loaded.
+
    Defaults to `PAPERLESS_DATA_DIR/classification_model.pickle`.

 ## Logging