François Pinard wrote: > A simple avenue is to get Python itself to evaluate the string as a constant > (you ensure this by removing evaluation context). Something like this: > > PARSED = eval(UNPARSED, {}, {}) >>> UNPARSED = "__import__('os').system('echo dream on!')" >>> PARSED = eval(UNPARSED, {}, {}) dream on! </F>