timeside/analyzer/core.py: use ast.literal_eval for safe parsing

diff --git a/timeside/analyzer/core.py b/timeside/analyzer/core.py
index 3dffde111075c4736a72559589da55d060509dd6..bd28d4dceeb13986d14536b04a484ecfcb792ebc 100644 (file)
--- a/timeside/analyzer/core.py
+++ b/timeside/analyzer/core.py
@@ -97,6 +97,7 @@ class AnalyzerResultContainer(object):
 
     def from_xml(self, xml_string):
         import xml.dom.minidom
+        import ast
         doc = xml.dom.minidom.parseString(xml_string)
         root = doc.getElementsByTagName('telemeta')[0]
         results = []
@@ -105,7 +106,7 @@ class AnalyzerResultContainer(object):
             child_dict = {}
             for a in ['name', 'id', 'unit', 'value']:
                 child_dict[a] = str(child.getAttribute(a))
-            child_dict['value'] = eval(child_dict['value'])
+            child_dict['value'] = ast.literal_eval(child_dict['value'])
             results.append(child_dict)
         return results