[issue39158] ast.literal_eval() doesn't support empty sets
Jan. 6, 2020
11:24 a.m.
Raymond Hettinger <raymond.hettinger@gmail.com> added the comment:
The function literal_eval is not safe anymore as the constructor can be intercepted
"Safe" means safe from user input to literal_eval(). If a person can already write arbitrary code that redefines a builtin, then they can already do anything they want. ---------- _______________________________________ Python tracker <report@bugs.python.org> <https://bugs.python.org/issue39158> _______________________________________
2347
Age (days ago)
2347
Last active (days ago)
0 comments
1 participants
participants (1)
-
Raymond Hettinger