Replace eval/exec occurrences with ast.literal_eval #157

New Issue

Closed

opened 2022-07-05 01:39:01 +02:00 by blacklight · 0 comments

blacklight commented

2022-07-05 01:39:01 +02:00

Owner

Created by: BlackLight

Some parts in the code currently expand the action context variables through exec/eval.

Those calls are quite unsafe: replace them with ast.literal_eval.

*Created by: BlackLight* Some parts in the code currently expand the action context variables through exec/eval. Those calls are quite unsafe: replace them with ast.literal_eval.

blacklight closed this issue

2022-07-05 01:39:01 +02:00

Sign in to join this conversation.

No Label

good first issue

waiting user input

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: platypush/platypush#157

No description provided.