"dump" ignores validation

[rayrapetyan]

"dump" ignores validation

[dv297]

I haven't used this library directly but I was browsing resources around Marshmallow and stumbled upon this. Since this library is built on-top of Marshmallow, it probably inherits Marshmallow's dump behavior.

From the original Mashmallow docs

Validation occurs on deserialization but not on serialization. 
To improve serialization performance, data passed to Schema.dump() are considered valid.

https://marshmallow.readthedocs.io/en/stable/quickstart.html#validation

For what it's worth, Marshmallow's behavior on this also surprised me 🤷 But yea, it might be outside the scope of this library.

[dairiki]

Since this library is built on-top of Marshmallow, it probably inherits Marshmallow's dump behavior.

This is the correct answer. Marshmallow schemas (which is what marshmallow_dataclass constructs) do not validate on serialization. (The model is: untrusted user data is validated when deserialized, after which the python-side data --- including that constructed programmatically --- is assumed to be valid.)

Closing.