Add a warning about untrusted input to configparser docs (#146276)

StanFromIreland · web-flow · commit fb8d8d9c9f9c · 2026-03-22T19:58:31.000-04:00
diff --git a/Doc/library/configparser.rst b/Doc/library/configparser.rst
@@ -24,6 +24,11 @@ can be customized by end users easily.
    This library does *not* interpret or write the value-type prefixes used in
    the Windows Registry extended version of INI syntax.
 
+.. warning::
+   Be cautious when parsing data from untrusted sources. A malicious
+   INI file may cause the decoder to consume considerable CPU and memory
+   resources. Limiting the size of data to be parsed is recommended.
+
 .. seealso::
 
    Module :mod:`tomllib`
