# Passive Python deserialization fixture only import pickle obj = pickle.loads(request.body) unpickler = pickle.Unpickler(file_obj)