Add a warning about untrusted input to `configparser` docs (#146276)

diff --git a/Doc/library/configparser.rst b/Doc/library/configparser.rst
index 4c1750de1d39337124adcecb396fbfd3f597f621..4d720176fcc334a5544b0c872a247ac37b9effe3 100644 (file)
--- a/Doc/library/configparser.rst
+++ b/Doc/library/configparser.rst
@@ -24,6 +24,11 @@ can be customized by end users easily.
    This library does *not* interpret or write the value-type prefixes used in
    the Windows Registry extended version of INI syntax.
 
+.. warning::
+   Be cautious when parsing data from untrusted sources. A malicious
+   INI file may cause the decoder to consume considerable CPU and memory
+   resources. Limiting the size of data to be parsed is recommended.
+
 .. seealso::
 
    Module :mod:`tomllib`