On 20 May 2013 09:19, "Frank Millman" <fr...@chagford.com> wrote:
> Quoting from the manual -
>
> "Safely evaluate an expression node or a string containing a Python
expression. The string or node provided may only consist of the following
Python literal structures: strings, bytes, numbers, tuples, lists, dicts,
sets, booleans, and None."
>
> The operative word is 'safely'. I don't know the details, but it prevents
the kinds of exploits that can be carried out by malicious code using
eval().

Literals are only a subset of expressions. The documentation is a bit
misleading, by stating it accepts a "python expression".

This individual is rightfully confused.
-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to