lab.nexedi.com will be down from Thursday, 20 March 2025, 07:30:00 UTC for a duration of approximately 2 hours

Commit b2e73525 authored by Jérome Perrin's avatar Jérome Perrin

Don't use builtin eval to compute the value, as it is definitively too

risky, and the result can be achieved with a TALES expression.


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@5760 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent ee99a292
......@@ -708,15 +708,7 @@ class ListBoxWidget(Widget.Widget):
for (k,v) in default_params:
if REQUEST.form.has_key(k):
params[k] = REQUEST.form[k]
elif not params.has_key(k):
# Probalby eval must be removed, we have tales
# expressions instead
try:
params[k] = eval(v)
except (ConflictError, RuntimeError):
raise
except:
params[k] = v
params.setdefault(k, v)
# Allow overriding list_method, count_method and stat_method by params
if params.has_key('list_method_id'):
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment