Safe eval, or how to get list from string

Steven Bethard steven.bethard at gmail.com
Mon May 16 00:47:07 EDT 2005


Joseph Garvin wrote:
> bwooster47 at gmail.com wrote:
> 
>>It has something called "reval" looks that would fit my needs
>>perfectly.
>>
>>Details:
>>http://www.faqts.com/knowledge_base/view.phtml/aid/4550/fid/538
> 
> If I remember correctly reval and it's brothers were deemed insecure,
> are no longer developed, and are present only for sake of backwards
> compatibility. See the global module index entry on it.

I believe some of the old security holes have been patched.  See my 
recent post at:

http://mail.python.org/pipermail/python-list/2005-May/281032.html

My understanding though is that it's still not considered appropriate 
for production use.

STeVe



More information about the Python-list mailing list