Improve security: `eval()` -> `ast.literal_eval()` #531

jsxs0 · 2023-02-28T19:58:08Z

Replacing the usage of the potentially insecure eval() function with the safer ast.literal_eval() function. The recommended change aims to improve the overall security of the codebase.

Request for Audit: Implementation of eval()

6ddc4bb

jsxs0 changed the title ~~Request for Audit: Implementation of eval()~~ Improve security: eval() -> ast.literal_eval() Feb 28, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Improve security: `eval()` -> `ast.literal_eval()` #531

Improve security: `eval()` -> `ast.literal_eval()` #531

jsxs0 commented Feb 28, 2023

Improve security: eval() -> ast.literal_eval() #531

Are you sure you want to change the base?

Improve security: eval() -> ast.literal_eval() #531

Conversation

jsxs0 commented Feb 28, 2023

Improve security: `eval()` -> `ast.literal_eval()` #531

Improve security: `eval()` -> `ast.literal_eval()` #531