RetroSearch Browse

Wed Apr 11 11:26:03 EDT 2001 · http://mail.python.org/pipermail/python-list/2001-April/066102.html

/F wrote:
>>>> eval("{'name': 'Cleopatra'}", {"__builtins__": {}})
>{'name': 'Cleopatra'}
>
>the __builtins__ stuff is optional, but provides some protection
>from evil data providers:

Note that it isn't full protection.  Consider

  eval("[0] * (2 ** 31)")

which will cause most machines to run out of memory.

                    Andrew
                    dalke at acm.org

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from http://mail.python.org/pipermail/python-list/2001-April/066102.html below:

converting string to dict ?