feat(python): deserialization with user input (CWE-502) #1406

Job	Run time
build (javascript/express)	2m 16s
build (javascript/hapi)	18s
build (javascript/lang)	3m 23s
build (javascript/node)	20s
build (javascript/react)	37s
build (javascript/third_parties)	1m 58s
build (ruby/lang)	4m 11s
build (ruby/rails)	1m 46s
build (ruby/third_parties)	3m 25s
build (java/lang)	3m 6s
build (java/spring)	19s
build (java/android)	18s
build (java/third_parties)	36s
build (php/lang)	5m 10s
build (php/symfony)	57s
build (php/third_parties)	1m 7s
build (python/django)	41s
build (python/lang)	1m 47s
build (python/third_parties)	11s
build (go/lang)	1m 0s
build (go/gosec)	2m 8s
build (go/gorilla)	16s
build (go/third_parties)	38s
	36m 28s

Provide feedback