From f6c6422b529ee7eaec64f5fd9b507f6237ac85ed Mon Sep 17 00:00:00 2001 From: Paul Brossier Date: Mon, 15 Apr 2013 02:27:02 -0500 Subject: [PATCH] timeside/analyzer/core.py: use ast.literal_eval for safe parsing --- timeside/analyzer/core.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/timeside/analyzer/core.py b/timeside/analyzer/core.py index 3dffde1..bd28d4d 100644 --- a/timeside/analyzer/core.py +++ b/timeside/analyzer/core.py @@ -97,6 +97,7 @@ class AnalyzerResultContainer(object): def from_xml(self, xml_string): import xml.dom.minidom + import ast doc = xml.dom.minidom.parseString(xml_string) root = doc.getElementsByTagName('telemeta')[0] results = [] @@ -105,7 +106,7 @@ class AnalyzerResultContainer(object): child_dict = {} for a in ['name', 'id', 'unit', 'value']: child_dict[a] = str(child.getAttribute(a)) - child_dict['value'] = eval(child_dict['value']) + child_dict['value'] = ast.literal_eval(child_dict['value']) results.append(child_dict) return results -- 2.39.5