Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
chetantoshniwal
2026-06-02 18:19:34 -07:00
committed by GitHub
Unverified
parent 70c88d2150
commit 462f37e77d
2 changed files with 5 additions and 5 deletions
@@ -27,8 +27,8 @@ type filtering, but checkpoint storage itself must be properly access-controlled
- Never route untrusted user input directly into ``deserialize_value`` without
first calling :func:`strip_pickle_markers` to neutralize injection of
pickle markers into the data path.
- Use ``allowed_types`` on your checkpoint storage configuration to restrict
the set of types that can be deserialized.
- Configure your checkpoint storage with ``allowed_checkpoint_types`` (or call
``decode_checkpoint_value(..., allowed_types=...)`` directly) to restrict the set of types that can be deserialized.
See :mod:`agent_framework._workflows._checkpoint_encoding` for the full
security model documentation.