feedback

Author: JelleZijlstra

Doc/library/annotationlib.rst

@@ -45,7 +45,7 @@ and :func:`call_annotate_function`, as well as the
 :func:`call_evaluate_function` function for working with
 :term:`evaluate functions <evaluate function>`.
 
-.. warning::
+.. caution::
 
    Most functionality in this module can execute arbitrary code; see
    :ref:`the security section <annotationlib-security>` for more information.
@@ -610,18 +610,19 @@ Below are a few examples of the behavior with unsupported expressions:
 
 .. _annotationlib-security:
 
-Security
---------
+Security implications of introspecting annotations
+--------------------------------------------------
 
-Much of the functionality in this module involves executing arbitrary code. For example,
+Much of the functionality in this module involves executing code related to annotations,
+which can then do arbitrary things. For example,
 :func:`get_annotations` may call an arbitrary :term:`annotate function`, and
 :meth:`ForwardRef.evaluate` may call :func:`eval` on an arbitrary string. Code contained
 in an annotation might make arbitrary system calls, enter an infinite loop, or perform any
-other operation. This is also true for access to the :attr:`~object.__annotations__` attribute,
+other operation. This is also true for any access of the :attr:`~object.__annotations__` attribute,
 and for various functions in the :mod:`typing` module that work with annotations, such as
 :func:`typing.get_type_hints`.
 
-Any security issues arising from these facts also apply immediately after importing
+Any security issue arising from this also applies immediately after importing
 code that may contain untrusted annotations: importing code can always cause arbitrary operations
 to be performed. However, it is unsafe to accept strings or other input from an untrusted source and
 pass them to any of the APIs for introspecting annotations, for example by editing an

Doc/library/inspect.rst

@@ -1289,7 +1289,7 @@ Classes and functions
    This is an alias for :func:`annotationlib.get_annotations`; see the documentation
    of that function for more information.
 
-   .. warning::
+   .. caution::
 
       This function may execute arbitrary code contained in annotations.
       See :ref:`annotationlib-security` for more information.

Doc/library/typing.rst

@@ -3367,7 +3367,7 @@ Introspection helpers
    See also :func:`annotationlib.get_annotations`, a lower-level function that
    returns annotations more directly.
 
-   .. warning::
+   .. caution::
 
       This function may execute arbitrary code contained in annotations.
       See :ref:`annotationlib-security` for more information.
@@ -3518,7 +3518,7 @@ Introspection helpers
    See the documentation for :meth:`annotationlib.ForwardRef.evaluate` for
    the meaning of the *owner*, *globals*, *locals*, *type_params*, and *format* parameters.
 
-   .. warning::
+   .. caution::
 
       This function may execute arbitrary code contained in annotations.
       See :ref:`annotationlib-security` for more information.